NMCP AVHE Access Instructions v2.1

created by Jacob M. Wessler
contact info in the Outlook Global
Last Updated: Mar 21, 2020

introduction

This page was created to help users access AVHE medical applications and DEE Webmail from home.

Please follow all these instructions in order.

They are.

Very.

Important.

If, after following the instructions, you find yourself stuck, send me an e-mail. My contact information is in the Outlook Global. I'm the only Lt Col Jacob Wessler in there.

Good luck!!
Jacob

what CAC reader should I get?

Get one of these two CAC readers. (click the links to shop at Amazon. These are NOT affiliate links. I don't make any money from you clicking them.)

Stay away from the SCR331. It's pretty old and doesn't play well with the current setup.
It looks like this:

enable your CAC reader

Now that you have a CAC reader, you may have to install some software to make it work with your Mac.

To find your operating system, click the Apple icon in the top left corner of your screen and select "About this Mac." The pop-up will tell you what version is installed (ex: Version 10.15.4).

If your operating system version is 10.15.0 or later (meaning a LARGER number in any of those three positions), then you should NOT install a CAC enabler! You can skip to the AVHE links.

Remember this version because you will need it when downloading the CAC enabling software.

In general, if your CAC is a Gemalto, download Smart Card Services.
If your CAC is an Oberthur, download CACKey.
PKard has its apostles but you have to buy the software (~$40). I have had success with CACKey for the past 8 years. You can likely get away without having to pay for PKard, but it is available as a last resort.

Go to this site and find the right CAC enabler for your CAC and your computer operating system.

Now that you have the software installed, you should make sure it works. Plug your reader into your computer, put your CAC in the reader, and open Keychain Access. Above the login item in the top left corner should be your name or PIV_II or something.

Click ONCE on that listing (you cannot unlock your CAC card...nor do you need to) - if you can see a bunch of certificates, some with your name and some without, then you were successful. If not, go back and download a different enabler.

download CITRIX

Moving along now.

We need to download the CITRIX software to talk to the AVHE servers. Because the software is changing so often, I will direct you to the CITRIX site to download the latest software.

Click here to go to the CITRIX downloads page.

Once there, click on the "Select Product..." drop-down and select "CITRIX Workspace App" from the list. On the next page, select "Workspace App for Mac" from the list.

Download the newest version of CITRIX Workspace App and install it.

Note: Previous versions of this instruction used CITRIX Receiver. This product is now dated and CITRIX has replaced it with the Workspace App. If you used Receiver in the past, download and use the Workspace App.

AVHE

AVHE stands for Application Virtual Hosting Environment and is used to connect to clinical applications. This means AHLTA, CHCS, and Essentris.

This system uses CITRIX Workspace App to run applications on your desktop.

You already installed CITRIX, right?

RIGHT?!

Okay...good.

 

You can connect to AVHE using this link: https://avhe.health.mil

Note: AVHE links used to be site specific. This is no longer the case. One URL for EVERYONE!

You will be presented with a drop-down asking you to select your CAC certificate.

Select your PIV certificate (DOD ID CA-XX; the numbers may be different for your CAC. That's okay.)

THIS STEP HAS CHANGED! We used to log in with the DOD E-MAIL certificate but now we use the DOD PIV certificate. Go figure.

Mac users will be presented with a dialog box asking for Keychain access. This is asking for your CAC PIN. Do not enter your computer password here. It is your 6-8 number CAC PIN.

Next you will see the DOD Consent Banner. Click Accept.

If everything worked out, you should see a page with two shortcuts: AVHE Support and DHAGSC Remedy Phone number (This is the DHA Global Service Center (GSC) Helpdesk phone number).

My page has additional apps already added in.

This is your Favorites tab. You can see Favorites at the top middle of the page.

Next to Favorites is the Apps tab. Click on Apps to find your site-specific application shortcuts.

Type your MTF in the search box to filter the apps.

The site knows which AHLTA application to give you based on your MTF. The name may not match. For example, Langley users will see the Portsmouth AHLTA app when they type in Langley. That's because Langley AFB is on the same CHCS/AHLTA host as Portsmouth.

Click the Details button of the app you want to use.

Click the "Add to Favorites" button to add this app to your Favorites tab.

Click the Open button to launch the app.

Click around. Have fun. You have just successfully set up AVHE at home.

connect to DHA Desktop

Some users will have the DHA desktop available to them. This will depend on whether your MTF is using the DHA desktop and whether you have signed up for a CDP account. If you used to use VMWare, you might have a DHA Desktop account.

If you see a DESKTOPS button at the top of your AVHE page, then you DO have access. Click that button and you'll go to the DHA Desktop page.

From there, click on the DHA Desktop - [YOUR MTF HERE]. I have not seen a difference between the Portsmouth 2016 and Portsmouth NAVMED options. I do NOT use the Portsmouth TEST desktop, though.

This Desktop will allow you to work on a desktop that looks just like your desktop at work. You can access all network applications (e.g. Synapse) and network shares (like your H: drive or any department/division drives). Since you're using regular Microsoft Outlook, you CAN send and receive encrypted e-mail.

connect to webmail

Webmail allows you to read your Defense Enterprise E-mail (DEE) from home.

Unfortunately, on a Mac, you cannot send/read encrypted e-mail or access your personal folders.

Here is the link: https://web.mail.mil

Accept the DoD Consent Banner.

Use your DoD PIV certificate.

The rest is pretty straightforward.

troubleshooting

There are a lot of things that can go wrong with the above process. Software will change frequently and the system can often get confused.

If you find that your system WAS working but now is NOT, think about anything that might have changed.

Did you:

• Get a new CAC?
• Get a new computer?
• Download new software?
• Update your computer software?

Any one of these might change your system.

The first step is to troubleshoot your CAC/reader combination. Try logging on to DTS or MyPay. If you can get in there, your problem is with AVHE. If you can't get in there, then the problem is with your CAC/reader combination. Reinstall your CAC enabler to see if that fixes things. (DO NOT reinstall/install a CAC enabler if you are on macOS 10.15 Cantalina or later)

thanks

I hope you found this useful. If you have any comments or critiques, please send me an e-mail. I'm in the global.

Jacob Wessler
Lt Col, USAF

versions

I'll keep a running list of version changes here so you can come back and see what has changed if you find you are having problems.