ARMY / DEFENSE KNOWLEDGE ONLINE (AKO) SPECIFICS   

AKO pamphlet

Is webmail2 stalling while loading?  (Follow this guide, it may help)

Alternate fix

You can also use the "old" webmail

Information from the AKO Single Sign On information page at: https://www.us.army.mil/suite/page/83  

NOTICE:  As you may have noticed, 1 December has now come and gone, and username / password option is still available on AKO.  The implementation date has been pushed back.  An unofficial date I have found is now set for 1 February 2012.  So, this will give you some more time to get your computer configured correctly.

The requirement for AKO to go 100% CAC is NOT their choice.  They are being mandated by the CIO-G6 (Chief Information Officer - G6) office based on this memorandum.  Which is based off of JTF-CNO CTO 07-015 (CAC required), Public Key Infrastructure (PKI) Implementation (specifically Task 10).

If you are receiving a message that AKO is not trusted, you need to update your DoD Certificates

If you have a new CAC [back shows: "Gemalto TOP DL GX4 144" or "Oberthur ID One 128 v5.5 Dual" at the top above the magnetic strip] and are having problems accessing AKO Webmail2, try updating your ActivClient (ActivClient 6.1 users use this link)

Most AKO access problems can be cured by following these changes to your Internet Explorer web browser

Watch a video of these steps

Are you having problems accessing AKO now that Microsoft has pushed out Internet Explorer 9 as a critical update, and the ideas above did not help?  If so, read how to uninstall IE 9 from your computer. 

Don't forget to hide the update:  Vista, Windows 7, or XP  (video)

I am the content provider for AKO's CAC Reference Center and answer emails for AKO.  Click link: http://scr.im/akocac to send email.  Some of the below questions are ones I answer often.

The process of registering your CAC with AKO was removed on 1 May 2011.  This also means dual CAC holders can use either issued CAC.  Read more about it here.

Question 1:  Why can't I log into AKO with my CAC?

Answer 1: Follow the guidance in this PDF.

Question 2:  When I logon to AKO with my CAC, I see my old CAC certificates (or more certificates than just my own) to choose from.  How do I clear the old Certificates?

Answer 2:  Open Internet Explorer, Select Tools, Internet Options, Content (tab), Certificates (button).  Select all of the Certificates you don't want, and select the Remove button.  You may have to do them individually.

Question 3:  When attempting to login to AKO, the browser closes (crashes), receive "500 - Internal Server Error" message, returns you to the home screen, or just doesn't seem to work.

Answer 3:  Make sure you have NOT added AKO to your trusted sites (unless you're using IE 7 or earlier)

Here's How:  Go to Tools, Internet Options, Security (tab), Click on trusted sites (green checkmark), Click Sites button, click on:  https://akocac.us.army.mil in the white box then click remove, close this window, click OK. 

 PDF visual steps for below items  

See video of these steps

Delete your temporary internet files in your browser.  NOTE: Make sure AKO is NOT the page that is currently open when you do this.  This means, navigate to any other website (i.e. Google), THEN perform these steps.

Here's How (IE9):  Click on the Cog in upper right corner of browser as this is your Tools, Internet Options, General tab, Select the Delete button in the Browsing History section, select the Delete Files button under Temporary Internet Files section

Here's How (IE8):  Go to Tools, Internet Options, General tab, Select the Delete button in the Browsing History section, select the Delete Files button under Temporary Internet Files section

Here's How (IE7):  Go to Tools, Internet Options, General tab, Select the Delete button in the Browsing History section, select the Delete Files button under Temporary Internet Files section

Here's How (IE6):  Go to Tools, Internet Options, General tab, Select the Delete Files button under Temporary Internet Files section 

Answer 3.1:  Go to Tools, Internet Options, Advanced tab, scroll down to the bottom and make sure that ONLY SSL 3.0 & TLS 1.0 is checked, any other SSLs and TLS' need to be unchecked.

Answer 3.2:  Close your Yahoo / AVG tool bar, close browser, reopen browser. 

Here's how:  Go to:  Tools, Toolbars, uncheck Yahoo / AVG toolbar.   Close browser then reopen it.  Now try logging into AKO with your CAC again.

Answer 3.3:  Verify you are using Internet Explorer when attempting to register your CAC.  If you are using Firefox, please look at the Firefox page for the needed DoD configuration file and installation assistance.

Answer 3.4:  Go to:  Tools, Internet Options, Security tab, click on the Internet Security option (it's usually already there).  Uncheck the box for Enable Protected Mode (Only on IE 7 & 8). 

Answer 3.5:  Open Internet Explorer, Click Tools, Internet options, content (tab), certificate (button) and delete all the certificates listed. Remove, then Re-insert the CAC, your certificates should automatically reload.  If they don't, open up ActivClient, click Tools, Advanced, Make Certificates available to Windows.

Answer 3.6:  Open Internet Explorer, Click Tools, Internet Options, Advanced (tab), Select the Reset... button at the bottom. 

Question 4: How do I change my AKO password? 

Here's How:  Logon to AKO with your CAC.  Click on: My Account, Account Settings, Change Password.   The rest should be self-explanatory.  AKO does have a self help video located here.  You will need to have Adobe Flash player installed, and be using Internet Explorer to view.  NOTE  I had to download them, open up IE, go to File, open, navigate to my download location and select the .swf file.  It then started to play in my web browser.

NOTE:  Please be aware..  Sometimes when you type in your new password, it will 'look' like you didn't do it right, because it will come back to the same page.   Please look at the top of the page; you will see one line of text that will be green for a successful change or red telling you a reason why it did not change.

Question 5:  Can I use Outlook to check my AKO email?

NOTICE:  With 1 December 2011 fast approaching, the ability to check AKO via IMAP will DISAPPEAR.  Those of us who currently are very productive by checking our email via Outlook will have to go back to chisels and stones (or webmail only).  If you set up your Outlook now, please don't get too used to it, as this ability will end somewhere around 1 February 2012.

NOTICE:  As you may have noticed, 1 December has now come and gone, and username / password option is still available on AKO.  The implementation date has been pushed back.  An unofficial date is now 1 February 2012.  So, this will give you some more time to get your computer configured correctly.

UPDATE:  AKO has their Outlook Connector working with CAC and  currently works with with Outlook 2003 & 2007, (not 2010)  I was finally able to get this to work on a computer I set up with Outlook 2007.  The last time I asked (about Outlook 2010), they were "hoping" for December 2011.

Answer 5:  Yes you can.  Here is how to set up AKO in Outlook 2007 (with pictures), or Outlook 2010, or any other POP / IMAP email client.  (You can also check your email on your Mobile Phone).  The instructions here are for Outlook 2007 or 2010, but are virtually the same setting for Outlook 2003.

Answer 5.1:  Set up the AKO White Pages in Outlook (Windows) (watch video).

Answer 5.1a:  Set up the DoD411 Global Address List.  NOTE:  This may be our only option once we lose our AKO username / password (Answer 6.1 above)

Answer 5.2:  Advanced Technologies aka 'Beta Mail' Exchange Settings in Outlook 2010.

Question 6:  Can I use Thunderbird to check my AKO email?

Answer 6: Yes you can.  Here is how to set up AKO in Thunderbird

Question 7: Can I decide how my "Friendly name" shows up on AKO?   A friendly name example is:  Danberry, Michael J CW3 MIL USA USARC.

Answer 7:  If you are dual account holder (i.e. you are a civilian and a Reservist) you can select which friendly name is displayed within your AKO webmail. 

You may also visit help.us.army.mil for the official instructions.

Question 8:  "There is a problem with this website security certificate" error.  Your options are listed as  "Click here to close this webpage" or "Continue to this website" where it states it is not recommended.

Answer 8:  Latest DoD Certificates are needed, I have instructions where you can download and install them here

Question 9:  I am receiving the message: "403 Access Forbidden - You do not have Permission to Access this resource."

Answer 9:  Verify that you do have the ActivClient & DoD certificates software installed, Visit the Notes page to double check what you installed already.

Answer 9.1:  Verify that you are using Internet Explorer when attempting to utilize your CAC.  If you are using Firefox, please look at the Firefox page for the required configuration.

Answer 9.2:  If you receive this message when trying to download ActivClient, you need to know that the ActivClient download links on AKO are for Army personnel only.  If your account is listed as an Army volunteer, Guest, family member, retired, or other military branch, you  will not be able to download the file from AKO.  Other military branches look here to find where you can download ActivClient.

Answer 9.3:  Go to: https://www.us.army.mil from this link.  There could be a problem with the shortcut in your favorites.  Simply re add AKO to your favorites replacing your existing one.  I also right click and select properties to remove all of the extraneous stuff after us.army.mil  then save.  This helps speed up the load from your favorites.

Answer 9.4:  Follow this PDF for correcting the settings in your Internet Explorer

Answer 9.5:  This could also be caused by your Antivirus / Security Software.  First try disabling it before going to AKO.  You can also uninstall it then restart your computer and see if it works afterwards.  This has been the cure for a few McAfee and Kaspersky users.

Answer 9.6:  ActivClient does not always recognize a CAC if you insert it after you have opened Internet Explorer.  Solution:  Close all Internet Explorer windows, remove your CAC from the reader, re-insert it into the reader, now open Internet Explorer.

Question 10:  Receiving:  "You are not logged in with your CAC" when you are actually logged on with your CAC when using Firefox.

Answer 10:  Use Internet Explorer when using your CAC with anything related to AKO (and most DoD sites).

Answer 10.1:  Look at #16 below

Answer 10.2:  Follow this PDF for correcting the settings in your Internet Explorer

Answer 10.3:  If you insist on using Firefox, look at the Firefox page for the required configuration.

Question 11:  When attempting to extract ActivClient 6.1, the icon is not a folder with a zipper on it, or a different program opens up. 

Answer 11:  Somehow your file association was changed on your computer.  Look here for the answer

Question 12:  I have 2 CACs (1 military & 1 civilian), I'm only able to use one on AKO.  Is this correct?

Answer 12:  No, not as of: 1 May 2011 you do not have to manually register your CAC anymore, so, both off them will work on AKO.  Read more

Question 13:  I set up my AKO logon for CAC only. I don't want it this way anymore, how can I change it back?

NOTE:  This will not be an option after 1 December.

Answer 13:  To remove the CAC-Only logon, you must be able to access your account with your CAC.  Follow these instructions:

Log into your AKO/DKO account with your CAC. Click on the ‘My Account’ tab. Click on ‘Account Settings’. Click on ‘Change Password’. Enter a new password following the directions on the screen into the fields “New Password” and “Confirm New Password”. Click on “Remove CAC Only Login”.

 You may also visit  help.us.army.mil for the official instructions.

Question 14:  How do I contact the AKO Help Desk?

Answer 14:  All contact information is located on the help desk page at help.us.army.mil   

a.  Commercial:  866-335-ARMY(2769), then Select Option 2

b.  DSN:  312-560-1110 ask the operator to dial 866-335-2769, then Select Option 2

c.  Email:  help@us.army.mil  (much slower response time)

Question 15:  While logging into AKO with your CAC, selecting your certificate and typing in your PIN the page stalls at "You will be logged into AKO shortly."

Answer 15:  When the new window pops up showing you are being logged into AKO, make sure https://akocac.us.army.mil  is NOT in your trusted sites (IE 8 & 9),  Being in trusted sites is only required when using  IE 6 and 7). 

Here's How: Open Internet Explorer Go to Tools, Internet Options, Security (tab), Click on trusted sites (green checkmark), Click Sites (button) now click on https://akocac.us.army.mil and / or https://www.us.army.mil and then select Remove, close this window, then click OK.

Question 16:  Receive "Insert card" when attempting to access AKO, DTS, OWA or any other CAC enabled website when your CAC is inserted in the CAC reader and you can access it through ActivClient.

Answer 16.1:  Open Internet Explorer, Click Tools, Internet options, content (tab), certificates (button) and delete all the certificates listed.  Remove, then Re-insert your CAC, your certificates should automatically reload.  If they don't, open ActivClient, click Tools, Advanced, and select Make Certificates available to Windows.

Answer 16.2:  Follow this PDF for correcting the settings in your Internet Explorer

Question 17:  How do I change my AKO username after a legal name change.

Answer 17:  Visit this AKO Help page regarding username change

Question 18:  How do I send Digitally Signed, or Encrypted emails from AKO?

Answer 18:  Visit this AKO Help page regarding how to set this up.

Question 19:  Where can I change the settings to receive notifications via my AKO Email?

Answer 19:  Visit this AKO Help page regarding how to adjust the settings.

Question 20:  I am having problems using my CAC on AKO with Internet Explorer (IE8) and / or IE9

Answer 20: Follow this PDF for correcting the settings in your Internet Explorer

Question 21:  I am a contractor and my CAC expires on XXX but my AKO account renewed before the change in naming convention began.  I was not allowed to complete the online paperwork to renew my CAC without an email address with CTR in it, but I don't have one and won't automatically get one until my AKO account renews again early next year.  Help!

Answer 21: Each contractor who has a CAC renewal before the AKO renewal will have to call the AKO Help desk  

a.  Commercial:  866-335-ARMY(2769) then Select Option 2

b.  DSN: 312-560-1110 ask the operator to dial 866-335-2769 then Select Option 2

Provide your SSN and the answers to your security questions, the Help Desk will put in an order to change the AKO address.

Question 22:  Can I check my AKO email with my mobile phone?

Answer 22:  Yes you can, visit the mobile webpage for instructions.

Question 23:  How can I make the new AKO Webmail2 load faster?

Answer 23.1: Try this tweak (sometimes it works, sometimes it doesn't)

Answer 23.2:  Other ideas are located at the top of this page.

Question 24:  My email address is incorrect on my CAC, How can I fix it?

Answer 24:  Visit this website:  https://www.dmdc.osd.mil/appj/ump/umphome.do, select Replace Certificate to avoid going to a RAPIDS Site. 

NOTE: You have to logon to the site with your CAC.  Visual steps 

NOTE2:  In my tests with Windows 7, it did NOT work with the Windows 7 built in Smart Card utility or with ActivClient installed.  So, you will need to find a Windows Vista or XP computer.

An Air Force Major sent this:  "When I tried to access the CAC User Maintenance Portal on a Windows 7 computer, the Java failed; however, when I tried the same thing on my Windows 7 computer at work (.mil domain), Java still failed but I got a popup dialog that told me I had to use the 64-bit version of IE and Java.  When I started a browser session with the 64-bit IE, I was able to get to the User Maintenance Portal just fine."

Answer 24a:  You can also visit an ID card office

Question 25:  Receive following message when trying to logon to AKO with your CAC:

HTTP Status 400 - Invalid path /authenticate was requested 

--------------------------------------------------------------------------------

 type Status report

message Invalid path /authenticate was requested

description The request sent by the client was syntactically incorrect (Invalid path /authenticate was requested).

Answer 25:  Internet Explorer users: 

1.  Verify you have the latest DoD certificates installed

2.  Follow the guidance in this PDF to make sure your browser is configured correctly.

3.  Go to:  Tools, Internet Options, Advanced (tab) and click on: Restore advanced settings (button)

4.  If you are using your Favorites to access AKO, try from this direct link:  https://www.us.army.mil  If this works, it means your AKO link in your favorites is too old.  Once it works, add this new one to your Favorites.

Answer 25a:  Firefox users: 

1.  Upgrade to the latest version of Firefox

2.  If you are using your Bookmarks to access AKO, try from this direct link:  https://www.us.army.mil  If this works, it means your AKO link in your Bookmarks is too old.  Once it works, add this new one to your Bookmarks.

Question 26:  Receive the following message when trying to send an attachment via AKO webmail:  "Empty or Invalid File"

Answer 26:  Try using one of the other webmail links:  https://webmail.us.army.mil; https://webmail2.us.army.mil; or https://webmail-lite.us.army.mil

Question 27:  Why can't I digitally sign emails with AKO webmail?

Answer 27: Webmail Classic:  https://webmail.us.army.mil:   You need to be using ActivClient, set your account for S/MIME (see NOTE below), and Select a Signing Certificate (located under Options, Mail, Settings, Secure Messaging).

Answer 27: Webmail2: https://webmail2.us.army.mil:  You need to be using ActivClient, set your account for S/MIME (see NOTE below), and select Signing Certificate (located under Options, Mail, Local Account, Security)

Answer 27: Webmail-lite: https://webmail-lite.us.army.mil:  You need to be using ActivClient, set your account for S/MIME by selecting: Options, Global, check the S/MIME box, and select Signing Certificate (located under Options, Mail, AKO/DKO Account, Security)

NOTE:  To set your account for S/MIME, login to regular AKO, select My Account, Mail Preference, Mail Options, check the box titled:  Enable S/MIME