Can not connect to TCPT (TLS error)

Problem

When users are attempting to connect to TCPT, some users can not connect. They receive an error stating " Can't connect securely to this page". 


TCPT ERROR MESSAGE.PNG


Solution

With this situation, the TCPT (or CLC2S or STRATIS) web site is up and operational, however the computer's browser is unable to establish a secure connection to the server. There are two recommended solutions to solving this issue, with either being appropriate based on local computing requirements and directives.

The first option is to use Google Chrome as a browser, which may be downloaded and installed directly from Google's web site. This browser does not have the issue with the certificate configuration that IE or Edge may encounter from time to time.

The second option is to update and adjust the local certificates on the workstation to fix the connectivity issue. Start by going to the following link and running the 2 tools listed below.  Most users have seen an improvement after installation. For each application, follow the sequence of steps and prompts encountered to complete the certificate installation.

https://cyber.mil/pki-pke/pkipke-document-library/?_dl_facet_pkipke_topics=certificate-validation&_dl_facet_pkipke_type=tools
 

Certificate Validation Tab

  • FBCA Cross-Certificate Remover 1.15
  • Click Open
  • FBCA_crosscert_remover_v115
  • FBCA_crosscert_remover
  • Extract all
  • Extract
  • FBCA_crosscert_remover_v115
  • FBCA_crosscert_remover
  • Enter
  • Enter

Trust Store Tab

  • InstallRoot 5.2: NIPR Windows Installer
  • Non Administrator
  • Run
  • Next> Next> Next> Install
  • Run InstallRoot
  • Ensure Install DoD Certificates has a green check mark
  • Install Certificates
  • OK
  • Close window >Yes to save

If the web browser is still unable to connect and continues to receive the security errors, please contact the MLS2 support help desk for further assistance.