AKO Email Settings - Page 3

prican690 · 11/10/2009, 01:27 PM

Quote:

Originally Posted by mhunterga

I've followed all the steps to install the certificate, manually set up the server information, etc., but I'm still getting the error message: "The server's security certificate is not a trusted certificate." Can anybody help?

You have to install the certificates to your phone. Follow these steps below, I just did it and it worked.

After placing the certificates in the download folder via the USB, disconnect the phone from the USB and do the following:

1. Bring up the launcher card
2. Press the tab on the upper left corner (Launcher)
3. When the menu slides down select List Apps...
4. When the list apps menu shows up, click on the Preferences tab
5. When the menu slides down select Certificate Manager
6. Once the Security Certificates window pops up, tap on the icon in the bottom left corner so you can add the certificates to your phone.

Once you've completed these steps try logging into your AKO email via the Pre.

If you have any questions let me know.

Chris

slhelicopter · 11/13/2009, 10:06 PM

I thought I had it by trial and error from everywhere's advice. Here's what I did. OH I AM NOT USING AKO BETA!!

Set up as POP as follows:
Incomming server: pop.us.army.mil
Username: john.a.doe (do not put "@us.army.mil")
Password: (whatever it is, input it)
Port: 995
Ecryption: SSL

Outgoing Server: smtp.sprintpcs.com
use Authenitcation: OFF
Port: 25
Encryption: OFF

I can receive my AKO mail!! However, (and here's why I "thought I had it) Sending mail form my pre it goes out through my default email address. This even though I set the "reply to" email as ...us.army.mil AND even though I sent directly from AKO inbox and not from "all inboxes".

No matter what I try I can't seem to get the Outgoing server set to ...us.army.mil anything and have it work. I did try al variants of "smtp.mailrouter.us.army.mil / mailrouter.us.army.mil.

If anyone takes it from here and figures out how to make the sent mail come from the AKO account, let it be known. Again I am not using AKO Beta.

so close but yet so far.

Str8Leg · 12/02/2009, 12:02 PM

Incoming server: imap.us.army.mil
encryption: ssl
port: 993

Outgoing server: mailrouter.us.army.mil
Use authentication: ON
encryption: ssl
port:465

manually moved via usb to root and trusted the following certs individually:
dod ca-13
dod email ca-11 thru ca-17
dod root ca 2
dod ocsp ss
dod pki med root ca

Send and receive works.

knobbysideup · 12/02/2009, 12:50 PM

Quote:

Originally Posted by masonjam

I am attempting to set up my Pre for AKO email (Army Knowledge Online). I have used basic AKO (not the beta, OWA or exchange-based) for years on my Treo devices, but I can't make the Pre work. The only option NOT available on the Pre that was in Versamail is the Outgoing mail server authentication option "Use authentication (ESMTP)."

I have used every possible POP and IMAP config that I can think of to no avail.

Any help would be much appreciated.

Wow. People actually use AKO mail instead of forwarding it to their own division's servers? :-)

Slosh01 · 12/31/2009, 05:23 PM

Quote:

Originally Posted by allenkt

Alright, I'm using AKO Beta and I got it working! It should be pretty similar to the regular AKO.

1. First, you have to install the 2 certificates. Follow the instructions on this page to download the certs (How to Install DoD Root Certificates on Windows Mobile Devices « Tim Smeltzer’s Weblog).

2. Once you get them downloaded on to your computer you have to plug your Pre into your computer via the USB cable (the same one you use to charge it) and then copy those 2 .cer files into the download folder on your Pre.

3. Unplug the USB cable and go to the launcher and select "device info". scroll to the bottom and select "more info". Tap on "software" then tap on the top left where it says, "preferences" and choose "Certificate Manager". Click on the + sign on the lower left and you should see the two certificates you added to the folder. Just click on them and then choose "trust" when it asks what you want to do. Do that for both certificates.

4. Now go back to the email setup and set it up as an EAS account. I'm not sure what your settings will be here but it should be somewhere on the AKO page. For me it was just https://mail.beta.army.mil but yours will be something different.

Hope that works for you because it works perfectly for me now!

Karl

Success!!!!

I created this acct through the normal AKO email acct - not the Beta.

I did have to track down the certificates off of the DOD site through the AKO CAC link, the link off of Tim Smeltzer's weblog didn't take me to the same page & the links I initially downloaded did not work. - Send me a private message and I will provide you with the process to acquire the link. - Once I obtained the correct links I installed them on the Pre as described & then attempted to create a new email acct, entering email address & pword. It still did not recognize the certificates. I then attempted to manually create the account as an IMAP acct, which proved to be successful....one must have WiFi enabled.

Slosh01

Slosh01 · 12/31/2009, 05:33 PM

Quote:

Originally Posted by Str8Leg

Incoming server: imap.us.army.mil
encryption: ssl
port: 993

Outgoing server: mailrouter.us.army.mil
Use authentication: ON
encryption: ssl
port:465

manually moved via usb to root and trusted the following certs individually:
dod ca-13
dod email ca-11 thru ca-17
dod root ca 2
dod ocsp ss
dod pki med root ca

Send and receive works.

I only installed the DoD Root CA 2 certificate & the DoD Class 3 Root CA certificate. Things SEEM to be working alright.

andyeod22 · 01/18/2010, 12:00 PM

I have no clue how you get AKO Beta. The only AKO i know is regular AKO or AKO lite that is on the login page. I have a Palm Pixi which should have the same operating system as the pre. I did get it to work for like a week using IMAP settings and then one day I kept getting a Error saying the server security certificate was not trusted. I would like ok and nothing. I already downloaded the the DOD certs ( root 2 ca and root 3ca) to my phone using the the USB cable. I have no other idea.

allenkt · 01/18/2010, 12:20 PM

To get the AKO Beta, just send an email to beta.help@us.army.mil from your AKO and ask to switch over. This is from their FAQ page:

7/13/2009
What is Required to Join the Beta Mail Program?

The Advanced Technologies program tests potential future Army enterprise deployable technologies and it is not a part of AKO but the CIO/G6 office.

Our office runs beta software and we need users that will connect to our system to assist in providing feedback to influence product change and who understand that we will run into bugs during our evaluation period.

The AT team is not 24x7 and critical user data should not be stored on the Beta system. If you feel that you need a zero down time solution we would not recommend the Beta system. We do attempt to provide our users a high level off access to their information but cannot guarantee there will not be issues due to our environment.

What happens after I join?

The Advanced Technologies team modifies your mail forwarding in AKO to route all new messages to the Beta system however if you have a mailbox on another system it’s possible the mail will be split as users on the alternate system email you the mail will stay on that system.

If you feel you are a good candidate please contact Beta.help@us.army.mil to ask about joining the program

rodholliday · 01/18/2010, 01:08 PM

I have had AKO mail set up on my pre for several months. This weekend I started getting a "server's security certificate is not a trusted certificate" error. It did eventually send a test message but would not receive mail.

I reinstalled the certificates, deleted the email accounted and attempted to add it again but get the same error.

Through the web I have logged into AKO and then pulled up AKO mail (the AKO mail log in page never displays the accept button on the bottom of the page to go to the log in). I have access to my mail account that way but not through the direct mail program, which is much easier.

Any suggestions?

goodhomer1 · 01/18/2010, 04:22 PM

I have had the same problem and tried the same steps. Things were working great until the middle of last week. Any help/ideas???

Slosh01 · 01/18/2010, 08:14 PM

I too hit the proverbial wall over the weekend in regard to SSL certificates being "invalid" on my AKO email acct on the Pre.

I re-read Str8Leg's post - the one that I had replied too & stated that I had only installed the CA 2 & the Root CA certificate. I just downloaded & installed ALL the certificates that he listed, except for the DOD ocsp ss certificate - can't find it - and recreated the email acct on the Pre utilizing the IMAP setup. It accepted the build and it would appear as if I am Back-in-the-Saddle!!

Stand-by for further....

rodholliday · 01/18/2010, 10:00 PM

I went into the microsoft certmgr.exe and moved the DOD CA-13 and DOD CA-17 certificates to Trusted Root Certifications Authorities, exported them and then emailed them to my phone. I then installed them on my pre, added back my AKO account and it worked. I had never deleted or changed any of the certificates from when AKO was originally working on my phone. I currently have the below certificates in my pre:

DoD Root CA2
Dod CLASS 3 Root CA
DOD CA-17
DOD CA-13 (webmail)
DOD CA-13 (wmlogin)
DoD Root CA 13
DOD CA-17

Not sure which are needed or not needed but the mail function is back working.

gladesmellzgood · 02/18/2010, 03:54 AM

Quote:

Originally Posted by rodholliday

I went into the microsoft certmgr.exe and moved the DOD CA-13 and DOD CA-17 certificates to Trusted Root Certifications Authorities, exported them and then emailed them to my phone. I then installed them on my pre, added back my AKO account and it worked. I had never deleted or changed any of the certificates from when AKO was originally working on my phone. I currently have the below certificates in my pre:

DoD Root CA2
Dod CLASS 3 Root CA
DOD CA-17
DOD CA-13 (webmail)
DOD CA-13 (wmlogin)
DoD Root CA 13
DOD CA-17

Not sure which are needed or not needed but the mail function is back working.

Can you get me those files or are they protected under something to where you can't share certificates.