Not presented with request for certificate - EAMS-A enabled

CAC access to secure web sites for Android devices using the Thursby Sub Rosa™ app and Thursby branded card readers.
Demoguy
Posts: 7
Joined: Wed Dec 20, 2017 5:25 pm

Not presented with request for certificate - EAMS-A enabled

Post by Demoguy » Wed Dec 20, 2017 5:46 pm

I am currently evaluating the usefulness of this app for my soldiers.
As of now I am unable to access any site that utilizes the EAMS-A authentication suite.
Will this be corrected in a future release or is there a limitation that can not be overcame?

Current test setup:
Samsung S7
Sub Rosa 4 (build 1142)

Sites include www.us.army.mil and web.mail.mil

When these sites are attempted a connection error comes up say unable to secure connection. Reading through other posts I have turned off the enhanced owa and fips setting. Still no luck. The email is the main reason I want my soldiers to use this app for.

As my evaluation license expires soon a quick response would be appreciated, I understand it is near the holidays though.

David Mattes
Posts: 25
Joined: Fri Nov 11, 2016 11:24 am

Re: Not presented with request for certificate - EAMS-A enab

Post by David Mattes » Thu Dec 21, 2017 10:01 am

Demoguy,

When you try to access sites that use the EAMS-A authentication suite, do you receive that error before or after being prompted for a certificate or pin? Which certificate are you selecting when trying to access those sites? Are you on a Carrier Network or on WiFi when you receive the error message? Are you able to log into any other sites? I would like to open a trouble call for you, please send us an email to support@thursby.com.

-David

Demoguy
Posts: 7
Joined: Wed Dec 20, 2017 5:25 pm

Re: Not presented with request for certificate - EAMS-A enab

Post by Demoguy » Thu Dec 21, 2017 11:55 am

I am not prompted to select a certificate. And problem message says:
User aborted cert selection or no certificate available.

But I see all 3 identity certificates from my CAC card when I go to settings and user keychain.

David Mattes
Posts: 25
Joined: Fri Nov 11, 2016 11:24 am

Re: Not presented with request for certificate - EAMS-A enab

Post by David Mattes » Thu Dec 21, 2017 12:10 pm

What I would like you to do is remove the reader, close and restart the app, reconnect the reader and try to log in again. Let me know if this changes anything for you.

-David

Demoguy
Posts: 7
Joined: Wed Dec 20, 2017 5:25 pm

Re: Not presented with request for certificate - EAMS-A enab

Post by Demoguy » Fri Dec 22, 2017 10:23 am

I am presented with an invalid license state. My evaluation license has expired.

Demoguy
Posts: 7
Joined: Wed Dec 20, 2017 5:25 pm

Re: Not presented with request for certificate - EAMS-A enab

Post by Demoguy » Fri Dec 22, 2017 10:25 am

Though the notification on android for Sub Rosa shows identity available

David Mattes
Posts: 25
Joined: Fri Nov 11, 2016 11:24 am

Re: Not presented with request for certificate - EAMS-A enab

Post by David Mattes » Fri Dec 22, 2017 10:38 am

I've resent your eval email. When you receive it I would like you to open the email on the device you are doing the eval on, then click on the activation link. You should see a prompt about "Sub Rosa being activated" then please quit the app and relaunch it. From here please try to access a site that utilizes EAMS-A authentication.

-David

Demoguy
Posts: 7
Joined: Wed Dec 20, 2017 5:25 pm

Re: Not presented with request for certificate - EAMS-A enab

Post by Demoguy » Fri Dec 22, 2017 10:45 am

Thank you for the new evaluation license. I am still receiving the same error though. "User aborted cert selection or no available certificates"

Steps:
Open Rosa
When warning for no identities available insert card reader (scm Microsystems scr3310 v20)
Warning goes away on its own
Enter http://www.us.army.mil in address bar
Click I accept button
Click sign in with EAMS-A
Taken to: https://federation.eams.army.mil/sso/au ... &m=GET&r=f
click the CAC login button
Unable to securely connect





Phone is Samsung galaxy s7
android 6.0.1

Any other in for that could help let me know

Demoguy
Posts: 7
Joined: Wed Dec 20, 2017 5:25 pm

Re: Not presented with request for certificate - EAMS-A enab

Post by Demoguy » Fri Dec 22, 2017 10:46 am

This is after activating the eval license and then closing and reopening Sub Rosa.
I have also closed all other apps on my phone and restarted it

David Mattes
Posts: 25
Joined: Fri Nov 11, 2016 11:24 am

Re: Not presented with request for certificate - EAMS-A enab

Post by David Mattes » Fri Dec 22, 2017 11:02 am

Please disconnect the reader and quit the app. Then relaunch the app, connect the reader and card when prompted and try again. Are you able to access any other sites that do not use EAMS? (Ex: MyPay)

Post Reply