This page was created to help users access AVHE medical applications and DEE Webmail from home.
Please follow all these instructions in order.
They are.
Very.
Important.
If, after following the instructions, you find yourself stuck, send me an e-mail. My contact information is in the DEE Outlook Global
Good luck!!
Jacob
There are many CAC card readers out there. These are the two that I recommend as I have had the most success with them. (click the links to shop at Amazon)
There is another CAC reader out there - the SCR331. I no longer support this CAC card reader. Please do not buy it.
It looks like this:
PC users click here to continue
That's a good question and the best place to start.
There are two pieces of information you need to find:
Let's walk through those steps now
In the top left corner of your screen is an Apple.
Click it.
You will see this menu. Select "About this Mac"
An information box will pop up with system information. Look in the center for the processor section.
If it says PowerPC, please click here.
Does it say "Intel" anywhere in there? If so, great! You can continue below.
Now we need to make sure that your computer was built AFTER May 2010.
Just like in the step above, click on the Apple then "About this Mac"
Click on the "More Info..." button.
You should see one of the two screens below.
Find the Serial Number and copy it.
Click here to go to a site that tells you your computer's born-on date. The site is in the Netherlands and is in a foreign language but paste your serial number into the box and hit the button.
Find the Production Year and Production Week sections. If your computer was built BEFORE May 2010, please click here.
If your computer was built IN or AFTER May 2010, you can continue below.
Okay, so far so good.
Now we have to make sure your CAC card reader and your computer are talking to each other.
Apple has a new safety feature called Gatekeeper. This program prevents you from installing potentially dangerous software. Basically, any software that is NOT sold directly from Apple is considered dangerous. In order to install certain programs (like the CAC reader software and CITRIX), you may need to disable Gatekeeper.
Go to this article from Apple to learn how to disable Gatekeeper or bypass it for one application. If you disable it, please re-enable it after installing CITRIX.
It's safer that way.
Go to this site and find the right CAC enabler for your CAC card and your operating system.
To find your operating system, click the Apple in the top left corner of your screen and select "About this Mac." It will say Version 10.X.X. Here is the legend:
In general, if your CAC card is a Gemalto, download Smart Card Services.
If your CAC card is an Oberthur, download CACKey.
You should not need to pay for PKard, but it is available as a last resort.
Now that you have the software installed, you should make sure it works. Put your CAC in the reader and then open Keychain Access. Above the login item in the top left corner should be your name or PIV_II or something.
Click ONCE on that listing (you cannot unlock your CAC card...nor do you need to) - if you can see a bunch of certificates, some with your name and some without, then you were successful. If not, go back and download a different enabler.
AVHE stands for Application Virtual Hosting Environment. It uses the CITRIX Receiver web plugin to allow access to specific applications.
Those applications are AHLTA, CHCS, and Essentris.
It's pretty limited but it works.
Moving along now.
We need to download the CITRIX software. Because the software is changing so often, I will direct you to the CITRIX site to download the appropriate software
Click here to go to the CITRIX downloads page
Once there, select "CITRIX Receiver" from the "Select Product..." drop down then select "Receiver for [YOUR OPERATING SYSTEM HERE]" from the list.
Download the newest version of CITRIX Receiver and install it.
Apple has a safety feature called Gatekeeper. This program prevents you from installing potentially dangerous software. Basically, any software that is NOT sold directly from Apple is considered dangerous. In order to install certain programs (like the CAC reader software and CITRIX), you may need to disable Gatekeeper.
Go to this article from Apple to learn how to disable Gatekeeper or bypass it for one application. If you disable it, please re-enable it after installing CITRIX.
It's safer that way.
You should be able to move to the next step now. OCCASIONALLY, some users have had problems getting CITRIX Receiver to work. If that is the case, select "Legacy Client Software" from the Download Type and click Find. Download the "Online Plug-in..." file and install it. You should uninstall CITRIX Receiver first.
At this point, restart your computer.
Seriously. Do it.
Now.
This is the option for clinical applications. This means AHLTA, CHCS, and Essentris.
It is called the Application Virtualization Hosting Environment and it is supplied by the DOD.
This system uses CITRIX Receiver to run applications on your desktop.
Connect to AVHE using this link:
You will be presented with a drop-down asking you to select your CAC certificate.
Select the DOD EMAIL CA-XX certificate. (the numbers may be different for your CAC card. That's okay.)
This is another step folks forget. It is always the EMAIL certificate when connecting to AVHE.
I know that the DOD CA cert works for DTS and MyPay but it WILL NOT WORK WITH AVHE.
Choose the DOD EMAIL certificate.
Every time.
Mac users will be presented with a strange dialog box asking for Keychain access. This is asking for your CAC PIN. Do not enter your computer password here. It is your 6-8 number CAC PIN.
Next you will see the DOD Consent Banner. Click Accept.
If everything worked out, you should see a list of applications.
Click around. Have fun. You have just successfully set up AVHE at home.
To log off, close all your open applications. You can select CITRIX then Quit CITRIX for any open Receiver applications.
Make sure you click the Log Off button at the top of the screen. This allows others to log on and use the system.
In order to access e-mail, you have to use the Defense Enterprise E-mail (DEE) Outlook Webmail.
Unfortunately, you cannot send/read encrypted e-mail or access your personal folders.
Here is the link:
Accept the DoD Consent Banner.
Use your DoD E-mail CAC certificate.
The rest is pretty straightforward.
There are a lot of things that can go wrong with the above process. Software changes frequently and the system can often get confused.
If you find that your system WAS working but now is NOT, think about anything that might have changed.
Did you:
Any one of these might change your system.
The first step is to troubleshoot your CAC/reader combination. Try logging on to DTS or MyPay. If you can get in there, your problem is with AVHE. If you can't get in there, then the problem is with your CAC/reader combination. Start at the beginning of these instructions and work through them again.
Sometimes, your computer gets confused on which CAC certificate it should present to the server. The easiest way to fix this problem is to delete the keychain preference. You should do this if you notice that you are having trouble logging on when things were working before and you didn't change any of the above things.
Open Keychain
Find any reference to web.mail, web-mail, or AVHE. Click on those entries and delete them.
Go back to WebMail or AVHE and try logging in again.
Remember to use your DOD EMAIL CA-XX certificate.
I hope you found this useful. If you have any comments or critiques, please send me an e-mail. I'm in the global. If you have any problems, let me know.
Jacob
I'll keep a running list of version changes here so you can come back and see what has changed if you find you are having problems.
Website created