Please Help, I'm unable to access web.mail.mil or us.army.mil (AKO) via CAC/PIV. Common error I receive is 'Safari can't establish secure connection to the server 'certificate.us.army.mil' or safari can't open page because the server unexpectedly dropped the connection (server busy.try again.etc) Same thing for My CAC shows up in my Keychains as CACNG and I can read the info on the CAC (The reader LED light is solid green when CAC is inserted). I added the SystemCACertificates into keychains as well as into System I added MacAllCerts and MacRootCert 2,3, and 4 into System and Login DOD Root CA 2 certificate was modified to always trust (I read on one thread to delete this cert but haven't yet) I have run the Centrify diagnostic tool and saved a copy of the log. I'm running a new MacBook Pro (Retina, 15-inch, Mid 2015) macOS Sierra 10.12.2 CAC Reader: SCR33xx v2.0 USB SC Reader: Version: 6.01 Centrify Express for Smart Card 5.3.3 I am a single persona user and have not installed any other CAC enablers other than Centrify and have un/reinstalled multiple times clearing out the tokends as directed on this forum as well as militaryCAC. I'm simply trying to access these CAC enabled DOD websites to be able to check.mil emails and to complete required training courses as a satellite employee working from home.

MacBook Pro (Retina, 15-inch, Mid 2015) macOS Sierra 10.12.2. What is interesting is that I'm getting the same message whether the CAC reader is plugged in or not when trying to access these sites. But, I can see the proper CAC Keychain and certificates when the CAC reader is plugged in with the CAC inserted. Best Regards, Albert.

I'm computer savvy enough to be dangerous but can follow your instructions (i.e., I'm 'dumb' but trainable;)) Thanks in advance for your help. Ivan, Thanks for responding. I'm still dead in the water.

1) SystemCACertificates is NOT needed to add into Keychain Therefore, please first remove it from the Keychain first. I removed the SystemCACertificates keychain. Quickbooks for mac 2015 video writing checks. 2) Also please remove the 2 old DoD certificates as well. I don't know which specific certificates are the 2 old DoD certs to remove, so that hasn't been done. 3) Once done, please access into the following website to download the appropriate DoD rootCA certs: I have all of the DoD CA certs as well as rootCA certs, 2, 3, and 4 loaded in both the login and system keychains. This redundancy shouldn't be a problem, correct? Previously, I only had them saved in the login keychain.

I've attempted to reaccess CAC enabled sites and am receiving the same ' Safari can't open the Page. Safari can't establish a secure connection to the server for 'x certificate' (.mil sites) I've opened Centrify in Utilities and it shows Card Status: Reader: SCR 3310 Status: Authentication attempts remaining: 3. Thanks in advance for your help, again.

Update: Still no change regarding CAC access; unable to access sites via CAC On at least two.mil sites I'm getting similar error messages: 'Safari can't open the page 'because the server unexpectedly dropped the connection. This sometimes occurs when the server is busy. Wait for a few minutes and then try again.' What is interesting is that I'm getting the same message whether the CAC reader is plugged in or not when trying to access these sites.