Dodmerb Connection not Private

Discussion in 'DoDMERB' started by cksigranger, Mar 22, 2018.

Tags:
  1. cksigranger

    cksigranger Member

    Joined:
    Nov 22, 2017
    Messages:
    12
    Likes Received:
    4
    I just received an email saying that the DoDMERB has received my medical exam. It also states that I should go to their website http://dodmerb.tricare.osd.mil and create an account to follow the status of my exam. I looked it up and it says that my connection is not private and there are possibly attackers coming from that web address. I tried googling the website and it comes up as the first search result, seems pretty legit. What do I do here?
    Thank you.
     
    C76706340 likes this.
  2. C76706340

    C76706340 VMI '2019+3, AROTC Scholarship Winner

    Joined:
    Jan 13, 2018
    Messages:
    164
    Likes Received:
    105
    Upon visiting the site, you will always be notified that your Tricare portal is not private. Ignore the warning.
     
  3. cksigranger

    cksigranger Member

    Joined:
    Nov 22, 2017
    Messages:
    12
    Likes Received:
    4
    Thank you.
     
    C76706340 likes this.
  4. jaglvr

    jaglvr Member

    Joined:
    Dec 23, 2017
    Messages:
    247
    Likes Received:
    129
    Safari I believe gives a nasty warning. I would avoid Safari
     
  5. AROTC-dad

    AROTC-dad Moderator

    Joined:
    Mar 14, 2014
    Messages:
    3,908
    Likes Received:
    3,569
    This warning comes up pretty frequently with quite a few .mil and .gov websites.
     
  6. TacticalNuke

    TacticalNuke Administrator

    Joined:
    Jun 8, 2006
    Messages:
    2,637
    Likes Received:
    367
    The reason for the warning is because the DoD intermediate and root certificate authorities (CAs) are not normally installed by default on operating systems and/or browsers. The exception is some versions of OS X, but not macOS, which had the DoD certificates (see https://support.apple.com/en-us/HT202858) but still may have had the cross-certificate chaining issue. You can find certificate installation instructions at https://iase.disa.mil/pki-pke/getting_started/Pages/index.aspx as a part of the installation instructions for CAC access. You only need to follow the portion of the instructions pertaining to the certificate installation for the operating system you're using (https://iase.disa.mil/pki-pke/getting_started/Pages/windows.aspx for Windows, https://iase.disa.mil/pki-pke/getting_started/Pages/cert-chaining.aspx for Mac, or https://iase.disa.mil/pki-pke/getting_started/Pages/linux-firefox.aspx for Firefox on Linux). You can also see https://iase.disa.mil/pki-pke/Pages/tools.aspx under Trust Store for the complete list of tools and installer. If you want to cross-check this information, see https://www.nsa.gov/what-we-do/information-assurance/.

    Note that you should take precautions when installing a root and/or intermediate CA, as you are telling your OS/browser to trust any certificate issued by that CA. Thus, as a best practice, you should only install certificates that you trust and ensure that you're installing them by accessing a site via https without certificate errors. You should also only do so on a network you trust (e.g., not a public network) and via either a wired connections or wireless encrypted with modern encryption (e.g., not WEP or other insecure methods).

    -TN
     
    Last edited: Mar 23, 2018
    Falcon A likes this.
  7. Candidate_JP

    Candidate_JP New Member

    Joined:
    Sep 11, 2018
    Messages:
    2
    Likes Received:
    0
    I have the same problem and followed these links and installed all the certificates to no avail. I still have no ability to access the DoDMERB Tricare website.
     
  8. Capt MJ

    Capt MJ 5-Year Member

    Joined:
    Sep 27, 2008
    Messages:
    4,375
    Likes Received:
    5,356
    This is a keeper, Tactical Gouge from Tactical Nuke!
     
  9. TacticalNuke

    TacticalNuke Administrator

    Joined:
    Jun 8, 2006
    Messages:
    2,637
    Likes Received:
    367
    Can you post a link to the site you're trying to access?

    -TN