SSLv2Hello support with SunPKCS11/NSS in FIPS mode

Does anyone know if there is a way to enable support for SSLv2Hello when the JRE is configured to use a FIPS crypto module?
I have an NSS database running in FIPS mode, plugged into my JRE via the following lines in my java.security file:
security.provider.1=sun.security.pkcs11.SunPKCS11 C:/nss-pkcs11-test/nss-pkcs11.cfg
security.provider.4=com.sun.net.ssl.internal.ssl.Provider SunPKCS11-NSSFIPS
nss-pkcs11.cfg:
name=NSSFIPS
nssLibraryDirectory=C:\nss-3.11.4\lib
nssSecmodDirectory=C:\nss-pkcs11-test
nssDbMode=readOnly
nssModule=fipsand keystore/truststore config in the SSL connector in Tomcat's server.xml:
    <!-- TEST NSS PKCS11 MODULE -->
    <Connector port="8443" protocol="HTTP/1.1" SSLEnabled="true"
               maxThreads="150" scheme="https" secure="true"
             keystoreFile=""
             keystoreType="PKCS11"
             keystoreProvider="SunPKCS11-NSSFIPS"
             keystorePass="nsspassword"
             truststoreFile=""
             truststoreType="PKCS11"
             truststoreProvider="SunPKCS11-NSSFIPS"
             truststorePass="nsspassword"
               clientAuth="true" sslProtocol="TLS" />I've tried setting -Dhttps.protocols=TLSv1,SSLv2Hello, but that doesn't seem to make any difference. Currently the only way I can get things working is to disable SSLv2 in the browser, which is less than ideal in terms of user base support. Without SSLv2 disabled in the browser, I see the following error in my logs and am unable to establish the SSL connection with the server:
http-8443-1, handling exception: javax.net.ssl.SSLHandshakeException: SSLv2Hello is disabled
I understand that SSLv2 is not (and should not be) supported in FIPS mode, but it seems like when you have a browser client that supports TLS but sends an SSLv2Hello by default, the server (in my case, Tomcat 6 using the aforementioned JRE) should be smart enough to renegotiate the connection to TLS.
Any thoughts would be appreciated!

The browser should have disabled SSLv2Hello by default in the latest releases, because SSLv2 is prohibited now. "TLS clients MUST NOT send the SSL version 2.0 compatible CLIENT-HELLO message format." [RFC6176]

Similar Messages

  • Does TLS 1.2 work with SunPKCS11-NSS provider in FIPS mode?

    The following exception occurs while processing serverHelloDone during an attempt at TLS1.2 with NSS in FIPS mode (via modutil) .
         java.security.NoSuchAlgorithmException: no such algorithm: SunTls12RsaPremasterSecret for provider SunPKCS11-NSS
    Both the client and the server are running from a unit test using:
    JDK 1.8.0_31-b13
    nss-3.16.2.3-3
    The same test runs fine in FIPS mode using TLS1.1 or TLS1.0.  The same test also runs with TLS1.2 when the keystore is not in FIPS mode.
    I am thinking that it is not supported.  SunPKCS11-NSS provider needs to be updated with the SunTLS12* algorithms before this will work.  The JSSE's ClientKeyExchange expects to be able to obtain a KeyGenerator specific to TLS1.2.  When in FIPS mode, the crypto provider is SunPKCS11-NSS and it does not have the requested algorithm.
    Can anyone confirm or deny this?  Any ideas as to when it will be supported?
    I've been all over the map trying to figure this one out.  I am pretty sure at this point that it is not a problem with the NSS library.

    Startup Items are in System Preferences>Accounts>youraccount>Startup Items. To delete them just highlight one and click the minus sign. To test it without deleting any just create a new administrator account. Call it test and set the password as test also (easy to remember). Make sure there are no Startup Items. Log out of your account (Apple Menu>Log Out) and log into the new one or if you're running in safe mode, restart and log into the test account. See if it runs OK. If it does, you know it's something in your account causing the problem.
    John

  • FIPS mode: only SunJSSE TrustManagers may be used

    Hi,
    I want to used a custom trust manager that accepts self-signed certificates as valid, and delegates to the SunJSSE TrustManager for other certificates. I also want to use SunJSSE's experimental FIPS mode with SunPKCS11-NSS provider.
    I cannot do both, since in the FIPS mode, the SunJSSE requires that only its internal TrustManager be used. Why is this required?
    Is there any alternative for this? I want to make sure the self-signed certificates are accepted.
    Thanks,
    Shyamal

    I cannot do both, since in the FIPS mode, the SunJSSE requires that only its internal TrustManager be used. Why is this required?Because self-signed certificates aren't FIPS-compliant?
    I don't know about FIPS mode but in the ordinary case you don't need a custom TrustManager to accept a self-signed certificate. You just need it in your truststore.

  • Java 8 64 bit on Windows with NSS for FIPS 140 compliance

    I have asked this question on Stackoverflow but I am beginning to think that this may be a better forum to ask.
    According to JEP 131, Java 8 should provide a PKCS#11 Crypto provider for 64 bit Windows:  https://blogs.oracle.com/mullan/entry/jep_131_pkcs_11_crypto.
    With that in mind, I downloaded and built both 32 and 64 bit versions of NSS with NSPR using these instructions:  https://developer.mozilla.org/en-US/docs/NSS_Sources_Building_Testing
    I downloaded Java 8 for Windows 64 build b118, configured the java.security file and created a nss.cfg file:
    Excerpt from java.security file:
    security.provider.1=sun.security.provider.Sun
    security.provider.2=sun.security.rsa.SunRsaSign
    security.provider.3=sun.security.ec.SunEC
    security.provider.4=com.sun.net.ssl.internal.ssl.Provider SunPKCS11-NSS
    security.provider.5=com.sun.crypto.provider.SunJCE
    security.provider.6=sun.security.jgss.SunProvider
    security.provider.7=com.sun.security.sasl.Provider
    security.provider.8=org.jcp.xml.dsig.internal.dom.XMLDSigRI
    security.provider.9=sun.security.smartcardio.SunPCSC
    security.provider.10=sun.security.pkcs11.SunPKCS11 /devel/nss.cfg
    From my nss.cfg file:
    # Use NSS as a FIPS-140 compliant cryptographic token
    # SunPKCS11-NSS
    name = NSS
    #32 bit
    #nssLibraryDirectory = C:\devel\nss\nss-3.15.3.1\dist\WINNT6.1_DBG.OBJ\lib
    #64 bit
    nssLibraryDirectory = C:\devel\nss\nss-3.15.3.1\dist\WINNT6.1_64_DBG.OBJ\lib
    #non FIPS
    #nssDbMode = noDb
    #attributes = compatibility
    #FIPS
    nssSecmodDirectory = c:\devel\fipsdb
    nssModule = fips
    I ran the test suite that comes with NSS and it looks like all of the encryption/decryption tests passed (did have some issues with the tests that required hostname/domainname but that has to do with the Windows environment).
    So here is the problem. I run my test encryption app on Java 7 32 bit with the 32 bit version of NSS and everything works great. When I attempt to run Java 8 64 bit with 64 bit NSS I get the following error:
    java.security.ProviderException: Could not initialize NSS
    at sun.security.pkcs11.SunPKCS11.<init>(SunPKCS11.java:212)
    at sun.security.pkcs11.SunPKCS11.<init>(SunPKCS11.java:103)
    at sun.reflect.NativeConstructorAccessorImpl.newInstance0(Native Method)
    at sun.reflect.NativeConstructorAccessorImpl.newInstance(Unknown Source)
    at sun.reflect.DelegatingConstructorAccessorImpl.newInstance(Unknown Source)
    at java.lang.reflect.Constructor.newInstance(Unknown Source)
    at sun.security.jca.ProviderConfig$2.run(Unknown Source)
    at sun.security.jca.ProviderConfig$2.run(Unknown Source)
    at java.security.AccessController.doPrivileged(Native Method)
    at sun.security.jca.ProviderConfig.doLoadProvider(Unknown Source)
    at sun.security.jca.ProviderConfig.getProvider(Unknown Source)
    at sun.security.jca.ProviderList.getProvider(Unknown Source)
    at sun.security.jca.ProviderList.getIndex(Unknown Source)
    at sun.security.jca.ProviderList.getProviderConfig(Unknown Source)
    at sun.security.jca.ProviderList.getProvider(Unknown Source)
    at java.security.Security.getProvider(Unknown Source)
    at sun.security.ssl.SunJSSE.<init>(Unknown Source)
    at sun.security.ssl.SunJSSE.<init>(Unknown Source)
    at com.sun.net.ssl.internal.ssl.Provider.<init>(Unknown Source)
    at sun.reflect.NativeConstructorAccessorImpl.newInstance0(Native Method)
    at sun.reflect.NativeConstructorAccessorImpl.newInstance(Unknown Source)
    at sun.reflect.DelegatingConstructorAccessorImpl.newInstance(Unknown Source)
    at java.lang.reflect.Constructor.newInstance(Unknown Source)
    at sun.security.jca.ProviderConfig$2.run(Unknown Source)
    at sun.security.jca.ProviderConfig$2.run(Unknown Source)
    at java.security.AccessController.doPrivileged(Native Method)
    at sun.security.jca.ProviderConfig.doLoadProvider(Unknown Source)
    at sun.security.jca.ProviderConfig.getProvider(Unknown Source)
    at sun.security.jca.ProviderList.getProvider(Unknown Source)
    at sun.security.jca.ProviderList$ServiceList.tryGet(Unknown Source)
    at sun.security.jca.ProviderList$ServiceList.access$200(Unknown Source)
    at sun.security.jca.ProviderList$ServiceList$1.hasNext(Unknown Source)
    at javax.crypto.KeyGenerator.nextSpi(KeyGenerator.java:323)
    at javax.crypto.KeyGenerator.<init>(KeyGenerator.java:158)
    at javax.crypto.KeyGenerator.getInstance(KeyGenerator.java:208)
    at STSAESEncryption.generateKeyWithGenerator(STSAESEncryption.java:74)
    at Main.main(Main.java:24)
    Caused by: java.io.IOException: %1 is not a valid Win32 application.
    at sun.security.pkcs11.Secmod.nssLoadLibrary(Native Method)
    at sun.security.pkcs11.Secmod.initialize(Secmod.java:210)
    at sun.security.pkcs11.SunPKCS11.<init>(SunPKCS11.java:207)
    ... 36 more
    Has JEP 131 been implemented with Windows/Java 64 bit as of b119?  If so has it been verified to work with NSS or should I submit a bug report?  I did download the code and the error is occurring in the following block of code at the line in bold (also with the arrow by it):
    public synchronized void initialize(DbMode dbMode, String configDir,
            String nssLibDir, boolean nssOptimizeSpace) throws IOException {
            if (isInitialized()) {
                throw new IOException("NSS is already initialized");
            if (dbMode == null) {
                throw new NullPointerException();
            if ((dbMode != DbMode.NO_DB) && (configDir == null)) {
                throw new NullPointerException();
            String platformLibName = System.mapLibraryName("nss3");
            String platformPath;
            if (nssLibDir == null) {
                platformPath = platformLibName;
            } else {
                File base = new File(nssLibDir);
                if (base.isDirectory() == false) {
                    throw new IOException("nssLibDir must be a directory:" + nssLibDir);
                File platformFile = new File(base, platformLibName);
                if (platformFile.isFile() == false) {
                    throw new FileNotFoundException(platformFile.getPath());
                platformPath = platformFile.getPath();
            if (configDir != null) {
                File configBase = new File(configDir);
                if (configBase.isDirectory() == false ) {
                    throw new IOException("configDir must be a directory: " + configDir);
                File secmodFile = new File(configBase, "secmod.db");
                if (secmodFile.isFile() == false) {
                    throw new FileNotFoundException(secmodFile.getPath());
            if (DEBUG) System.out.println("lib: " + platformPath);
    --->   nssHandle = nssLoadLibrary(platformPath);
            if (DEBUG) System.out.println("handle: " + nssHandle);
            fetchVersions();
            if (supported == false) {
                throw new IOException
                    ("The specified version of NSS is incompatible, "
                    + "3.7 or later required");
            if (DEBUG) System.out.println("dir: " + configDir);
            boolean initok = nssInitialize(dbMode.functionName, nssHandle,
                configDir, nssOptimizeSpace);
            if (DEBUG) System.out.println("init: " + initok);
            if (initok == false) {
                throw new IOException("NSS initialization failed");
            this.configDir = configDir;
            this.nssLibDir = nssLibDir;
    Any help or advise about filing a bug report would be appreciated.
    Thanks,

    Had a few similar short system freezes, after installing Windows 8 x64 on 13” MacBook Pro Mid-2010 with BootCamp 5.0.5033.
    There is a suggestion that DisableDynamicTick may fix the problem: https://discussions.apple.com/message/21565295#21565295. There were similar topics at Microsoft forums: 1, 2, 3. It was said “that this will likely reduce system battery life, so it should be undone when you update your Windows build or if it doesn't resolve your issue”, and that “this problem is resolved in the release versions of Windows 8”.
    Another possibility is that there is indeed a buggy driver, within BootCamp 5.0.5033, or a 3rd party, like a wireless network driver in the following case http://answers.microsoft.com/en-us/windows/forum/windows_8-performance/system-fr eeze-randomly-after-installing-windows-8/49488183-26cf-4389-af21-a85dc366c99a?pa ge=2#LastReply.
    The problem has been noticeable on my MacBook, but not annoying enough yet to spend time troubleshooting. If you find a robust solution, using the links above or other method, it would be interesting to know.
    HTH

  • FIPS support with Microsoft Remote Assistance?

    After setting up Remote Assistance in group policy for our domain, I can easily use it when not in FIPS mode by typing: msra /offerra
    However, if I have FIPS enabled on the PC I run this command from, the Remote Assistance session doesn’t connect.
    reg add HKLM\SYSTEM\CurrentControlSet\Control\Lsa\FipsAlgorithmPolicy /v Enabled /t REG_DWORD /d 1
    But it works again if I disable FIPS:
    reg add HKLM\SYSTEM\CurrentControlSet\Control\Lsa\FipsAlgorithmPolicy /v Enabled /t REG_DWORD /d 0
    It doesn’t matter if the other computer has FIPS enabled or not, just the helper computer that issues the “msra /offerra” command.  How do I configure Microsoft Remote Assistance to work with a Windows 7 workstation in FIPS mode?

    By default, the connections are encrypted when using Remote Assistance, as it uses RDP. Remote Assistance dosn't support FIPS encryption, but RDP does. Hence, you can configure RDP to use FIPS encryption.
    Regarding FIPS encryption with RDP, you can have a look at the following link:
    http://technet.microsoft.com/en-us/magazine/ff458357.aspx
    Balaji Kundalam

  • Is it possible to lockdown FIPS mode on in an Enterprise environment?

    My company is bound by rules that state we cannot use a browser that doesn't have FIPS enabled and it has to be locked on so a user cannot turn it off. Is this possible with Firefox. I have found some third party group policy templates but they do NOT address this FIPS issue.

    FIPS mode is stored in the secmode.db and requires that a MP is set to normally enable it.
    *https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/tools/NSS_Tools_modutil
    You can only disable FIPS once is has been enabled by deleting the keys.db file and the signons.sqlite file.
    As this will remove all stored passwords that is usually not an option that most would follow.
    I don't know of a way to prevent this and even if you would set the secmode.db file to read-only then this file can be deleted as well.
    FIPS requires to disable some cypher suites, but I don't know which ones in current Firefox releases.
    Prefs can be locked however like posted above by using a mozilla.cfg file.
    You could consider to ask in the newsgroup mentioned to the above posted MDN article if this is possible.
    *Newsgroup: mozilla.dev.tech.crypto

  • IPod Touch 4G "charging is not supported with this accessory"

    My iPod Touch 4g has been getting the message "charging is not supported with this accessory" ever since iOS 5, and I just recently updated to iOS 6.
    I currently use an Apple brand charging cord and a 3rd party charging cord, and none of them work.
    I've been looking around in forums and there have been several temporary fixes that haven't worked for me, such as:
    - closed all apps
    - purchased a new cord
    - did a hard reset
    - updated USB drivers
    - updated iPod Touch driver
    - updated iTunes( just covering all bases here)
    - plugged my iPod in several other computers
    - tried putting it in airplane mode, then turning the iPod off, and then plugging it into the computer
    - and cleaning out the dock with compressed air as well as the USB ports on my computer
    Does anyone with a permanent solution? Because this is starting to get very irritating...

    Not Charge
    - See:    
    iPod touch: Hardware troubleshooting
    iPhone and iPod touch: Charging the battery
    - Try another cable.
    - Try another charging source
    - Inspect the dock connector on the iPod for bent or missing contacts, foreign material, corroded contacts, broken, missing or cracked plastic.
    - Make an appointment at the Genius Bar of an Apple store.
      Apple Retail Store - Genius Bar

  • Help me please... need support with recovery on M305D-S483​1

    So I know I created the applications 1of1 disk, but for whatever reason it won't run.
    And I know I chose NOT to make the recovery disks (dumb I know) because there was that hidden partition on my disk to recover that way...
    Well now I need to recover, and when I press the zero key, I see the black screen appear with the words "HDD RECOVERY MODE" at the bottom, but then they disapear and the system boots up normally. It doesn't goto the RED LETTER screen.
    I've tried it several times... 
    I went into windows disk manager and the partition is there, but I can't seem to figure out how to get it to run or show me what's there. So I can make those disks... Can I just reinstall that toshiba software that makes the disks? Where would I find it, and what's it called?
    So, if I can, I need help getting that partition to load so I can wipe out my C drive and start over.
    If I can't, It makes no sense to pay Toshiba $30 for a set of recovery disks, that should be on the computer... (if that partition got wiped, it got wiped BY Toshiba when I sent my computer in for service, because I've not even THOUGHT about that partition since I bought the computer in 2008.) then I need to find another drive from another laptop, and change out the key code (i pulled the code off my computer with a key finder software thingi) or is there another way of me getting my vista back on here...
    I could have upgraded to windows 7 for $40, why would I want to pay $30 to Toshiba for something that's on my disk... 
    I'm a bit miffed right now, if you all couldn't tell... 
    Please let me know what I can do before I just throw out the whole computer in the trash. (I know it's old but it's what I have right now and would really like to get it working again)
    Thanks for your ear and help.

    You can try tapping f8 at start up to get to advanced start up options. Select safe mode, you can try to make recovery media from there. ( Start, all programs, Toshiba, support & recovery, recovery media creator )
    Let us know!
    Your support page is here :  http://support.toshiba.com/support/modelHome?freeT​ext=2060041
    Your manual, specs, and downloads are located there. 
    S70-ABT2N22 Windows 7 Pro & 8.1Pro, C55-A5180 Windows 8.1****Click on White “Kudos” STAR to say thanks!****

  • Holding with one hand in landscape mode?

    When playing games, some games require me to hold it with one hand in landscape mode. My iPad doesn't feel as secure as when I hold it with one hand in portrait mode. Is the iPad designed to be held in landscape mode with just one hand... therefore, no support on the opposite side of the iPad. Is it safe to hold my iPad that way?

    Take things easy. Research anything you buy and see it in person if possible. Everyone has different tastes.
    Deviating slightly, here is the link to downloading the User Guide if you do not already have it. http://support.apple.com/manuals/#ipad
    Take time to read it. (and re-read it!). It will stand you in good stead. Get your teeth into backups - whether in iTunes or iCloud - as we see so many people falling foul of this when something goes wrong. Welcome on board. Enjoy your iPad!

  • ADF Faces is not supported on IE running in compatibility mode

    hi
    In the blog post "Running ADF Faces applications with IE 9 in IE 8 compatibility mode "
    at https://blogs.oracle.com/jdevotnharvest/entry/running_adf_faces_applications_with_ie_9_in_ie_8_compatibility_mode
    Frank Nimphius explains about headers to make IE browsers behave like a previous version (in compatibility mode), but ends with this support information:
    Very Important(!)
    ADF Faces is not supported on IE running in compatibility mode. If using ADF Faces on IE in production, make sure IE is configured to run in native mode. Compatibility mode may only be used during development if your IE version is not certified with the JDeveloper version you work with. In production then you need to make sure the IE version matches the JDeveloper certification matrix.Reviewing the Release 1 "Certification and Support Matrix "
    at http://www.oracle.com/technetwork/developer-tools/jdev/index-091111.html#Browsers
    it currently says
    "For Internet Explorer 8 and 9, only Native mode is supported. View Compatibility mode should be disabled. "
    But there currently are no hits when searching for "compatibility" in the Release 2 "Certification and Support Matrix "
    at http://www.oracle.com/technetwork/developer-tools/jdev/jdev11gr2-cert-405181.html#Browsers
    - (q1) ADF Faces is not supported on IE running in compatibility mode, how much of that applies to JDeveloper Release 2 and where has it been documented?
    many thanks
    Jan Vervecken

    Thanks for your reply Frank.
    Frank Nimphius wrote:
    its bug 13906617 "ADD ADF FACES NOT SUPPORTED ON IE COMPATIBILITY MODE TO THE DOCUMENTATION"
    I was unable to find bug 13906617 on My Oracle Support. Has bug 13906617 been published?
    thanks
    Jan

  • How do u get help from apple support with iChat? I was able to chat with support last week to solve my problem but now the same issue is back and I don't see the option to chat now?

    qHow do u get help from apple support with iChat? I was able to chat with support last week to solve my problem but now the same issue is back and I don't see the option to chat now?

    For what it is worth I have noticed a similar issue from the iPad3 while at work and home. At work we have two Apple TV 3rd Generation installed and tied to our A/V system. I believe the issue has to do with a timeout on the broadcast saying "here I am" and allowing devices to connect.
    For example:
    At work we have several Wi-Fi SSID being broadcast from Cisco APs. The only one we can use with the Apple TV is the one that uses a WEP since the others are either setup to be hidden, require web page authentication, or have a login requirement from employees. Essentially, what I believe the issue is that the Apple TV periodically broadcasts a message to other iOS devices that support Mirroring. When the Apple TV does not get a response from a device it goes into a dormant mode and requires either a command from the remote control or a reboot. This has been tested with both the power management enabled and not enabled with the same results.
    As for when I come home, the Apple TV3 has not seen the device in some time and therefore is not broadcasting it's location information. A simple click of the circle or menu keys on the remote will give it the command to start broadcasting again and allow the iPad3 to see the Apple TV. When trying to Home Share the computer can not play (iTunes 11, Win8RTM) until the Apple TV is awoken then it will show up for mirroing.
    This may or may not assist you but, it hopefully explains how the issue may be happening.

  • Steps to enable FIPS mode

    I have been looking around for a good SUN documentation on enabling java in fips mode.
    The below link is not satisfactory to get going and enable fips mode.
    http://java.sun.com/javase/6/docs/technotes/guides/security/jsse/FIPS.html
    Can anybody share detailed documentaion or steps to enable java in fips mode.
    Thanks,
    Edited by: Sanj_M on Feb 2, 2010 1:35 AM

    1. How do I get a FIPS compliant provider.From a FIPS-compliant JCE provider vendor.
    2. The doc mentions two options to configure the provider
    Where will JSSE look for the configured provider.I believe it is jre/lib/ext but the vendor will tell you.
    3. How to test my application for FIPS complianceWell you could try to do any of the things described in the document you derided, such as enabling SSLv3 or a non-compliant protocol, and ensure that exceptions are thrown. However it is up to the vendor to provide you with a compliance certificate - this isn't something you need to test.

  • Installed Yosemite om my MacBook Air, resulted in no Sound at all. No input devices no output devices. What can  do? Have had 2 meetings with Apple support with no results.

    Recently, I installed Yosemite on my MacBook Air. After that I had no sound. Not even the start up chime. In Sound preferences there are no input devices and no output devices. I have had three meetings with Apple support with no results. Can anyone help? This seems to be a regular problem.

    Try these in order testing your system after each to see if it's back to normal:
    1. a. Resetting your Mac's PRAM and NVRAM
        b. Intel-based Macs: Resetting the System Management Controller (SMC)
    2. Restart the computer in Safe Mode, then restart again, normally. If this doesn't help, then:
         Boot to the Recovery HD: Restart the computer and after the chime press and hold down the
         COMMAND and R keys until the Utilities menu screen appears. Alternatively, restart the
         computer and after the chime press and hold down the OPTION key until the boot manager
         screen appears. Select the Recovery HD and click on the downward pointing arrow button.
    3. Repair the Hard Drive and Permissions: Upon startup select Disk Utility from the Utilities menu. Repair the Hard Drive and Permissions as follows.
    When the recovery menu appears select Disk Utility. After DU loads select your hard drive entry (mfgr.'s ID and drive size) from the the left side list.  In the DU status area you will see an entry for the S.M.A.R.T. status of the hard drive.  If it does not say "Verified" then the hard drive is failing or failed. (SMART status is not reported on external Firewire or USB drives.) If the drive is "Verified" then select your OS X volume from the list on the left (sub-entry below the drive entry,) click on the First Aid tab, then click on the Repair Disk button. If DU reports any errors that have been fixed, then re-run Repair Disk until no errors are reported. If no errors are reported click on the Repair Permissions button. Wait until the operation completes, then quit DU and return to the main menu. Select Restart from the Apple menu.
    4. Reinstall Yosemite: Reboot from the Recovery HD. Select Reinstall OS X from the Utilities menu, and click on the Continue button.
    Note: You will need an active Internet connection. I suggest using Ethernet if possible
                because it is three times faster than wireless.
    5. Reinstall Yosemite from Scratch:
    Be sure you backup your files to an external drive or second internal drive because the following procedure will remove everything from the hard drive.
    How to Clean Install OS X Yosemite
    Note: You will need an active Internet connection. I suggest using Ethernet if possible
                because it is three times faster than wireless.

  • HT4060 ' charging not supported with this accessory' and Not Charging at all

    Help and advice please.
    I am having problems getting the new IPad to charge at all and sometime it displays this message.
    ' charging not supported with this accessory'. This message is appearing occasionally on my 5 week old new iPad (3) within a few minutes of plugging it in.  :(    It is also not charging after this message appears. I am using the supplied wall socket and cable. I am also having problems getting the iPad to charge at all even if the message does not show. This is frustrating me no end. I expected a reliable device given the amount I paid.
    I am so disappointed, frustrated and feeling some what angry.
    I rang Apple support today (twice) and it made a liar of me working just fine for few minutes the first time then again failed, then for  hour or so after the second call seemed to work just fine. Now it is not charging, and won't charge despite repeatedly unplugging and repluging, Switching off the iPad and turning it back on etc etc.
    I am not happy at all!

    Not normal. Take it to an Apple Store for evaluation.
    Make a Genius Bar Reservation
    http://www.apple.com/retail/geniusbar/
    The quickest way (and really the only way) to charge your iPad is with the included 10W USB Power Adapter. iPad will also charge, although more slowly, when attached to a computer with a high-power USB port (many recent Mac computers) or with an iPhone Power Adapter (5W). When attached to a computer via a standard USB port (most PCs or older Mac computers) iPad will charge very slowly (but iPad indicates not charging). Make sure your computer is on while charging iPad via USB. If iPad is connected to a computer that’s turned off or is in sleep or standby mode, the iPad battery will continue to drain.
    Apple recommends that once a month you let the iPad fully discharge & then recharge to 100%.
    How to Calibrate Your Mac, iPhone, or iPad Battery
    http://www.macblend.com/how-to-calibrate-your-mac-iphone-or-ipad-battery/
    At this link http://www.tomshardware.com/reviews/galaxy-tab-android-tablet,3014-11.html , tests show that the iPad 2 battery (25 watt-hours) will charge to 90% in 3 hours 1 minute. It will charge to 100% in 4 hours 2 minutes. The new iPad has a larger capacity battery (42 watt-hours), so using the 10W charger will obviously take longer. If you are using your iPad while charging, it will take even longer. It's best to turn your new iPad OFF and charge over night. Also look at The iPad's charging challenge explained http://www.macworld.com/article/1150356/ipadcharging.html
    Also, if you have a 3rd generation iPad, look at
    Apple: iPad Battery Nothing to Get Charged Up About
    http://allthingsd.com/20120327/apple-ipad-battery-nothing-to-get-charged-up-abou t/
    Apple Explains New iPad's Continued Charging Beyond 100% Battery Level
    http://www.macrumors.com/2012/03/27/apple-explains-new-ipads-continued-charging- beyond-100-battery-level/
    New iPad Takes Much Longer to Charge Than iPad 2
    http://www.iphonehacks.com/2012/03/new-ipad-takes-much-longer-to-charge-than-ipa d-2.html
    Apple Batteries - iPad http://www.apple.com/batteries/ipad.html
    Extend iPad Battery Life (Look at pjl123 comment)
    https://discussions.apple.com/thread/3921324?tstart=30
    New iPad Slow to Recharge, Barely Charges During Use
    http://www.pcworld.com/article/252326/new_ipad_slow_to_recharge_barely_charges_d uring_use.html
    Tips About Charging for New iPad 3
    http://goodscool-electronics.blogspot.com/2012/04/tips-about-charging-for-new-ip ad-3.html
    Prolong battery lifespan for iPad / iPad 2 / iPad 3: charging tips
    http://thehowto.wikidot.com/prolong-battery-lifespan-for-ipad
    In rare instances when using the Camera Connection Kit, you may notice that iPad does not charge after using the Camera Connection Kit. Disconnecting and reconnecting the iPad from the charger will resolve this issue.
     Cheers, Tom

  • TS2634 i have a ipad gen1 refurbished the wall usb charger keeps saying charging is not supported with this accesory and has taken 24 hrs to charge half the battery and this is a factory charger that uses the usb port whats wrong here help please

    i just purchased a refurbished ipad gen 1 when i pluged in the wall charger with the usb cable a window came up and said (charging not supported with this accesory) the battry was almost dead so i pluged in the wall charger and
    the battery has been charging for 24 hrs and is only 50%charged it is the factory use charger for this unit why does this error come up and why is it taking so long the software is up to date

    Not normal. Take it to an Apple Store for evaluation.
    Make a Genius Bar Reservation
    http://www.apple.com/retail/geniusbar/
    The quickest way (and really the only way) to charge your iPad is with the included 10W or 12W USB Power Adapter. iPad will also charge, although more slowly, when attached to a computer with a high-power USB port (many recent Mac computers) or with an iPhone Power Adapter (5W). When attached to a computer via a standard USB port (2.5W, most PCs or older Mac computers) iPad will charge very slowly (but iPad indicates not charging). Make sure your computer is on while charging iPad via USB. If iPad is connected to a computer that’s turned off or is in sleep or standby mode, the iPad battery will continue to drain.
    Apple recommends that once a month you let the iPad fully discharge & then recharge to 100%.
    How to Calibrate Your Mac, iPhone, or iPad Battery
    http://www.macblend.com/how-to-calibrate-your-mac-iphone-or-ipad-battery/
    At this link http://www.tomshardware.com/reviews/galaxy-tab-android-tablet,3014-11.html , tests show that the iPad 2 battery (25 watt-hours) will charge to 90% in 3 hours 1 minute. It will charge to 100% in 4 hours 2 minutes. The new iPad has a larger capacity battery (42 watt-hours), so using the 10W charger will obviously take longer. If you are using your iPad while charging, it will take even longer. It's best to turn your new iPad OFF and charge over night. Also look at The iPad's charging challenge explained http://www.macworld.com/article/1150356/ipadcharging.html
    Also, if you have a 3rd generation iPad, look at
    Apple: iPad Battery Nothing to Get Charged Up About
    http://allthingsd.com/20120327/apple-ipad-battery-nothing-to-get-charged-up-abou t/
    Apple Explains New iPad's Continued Charging Beyond 100% Battery Level
    http://www.macrumors.com/2012/03/27/apple-explains-new-ipads-continued-charging- beyond-100-battery-level/
    New iPad Takes Much Longer to Charge Than iPad 2
    http://www.iphonehacks.com/2012/03/new-ipad-takes-much-longer-to-charge-than-ipa d-2.html
    Apple Batteries - iPad http://www.apple.com/batteries/ipad.html
    Extend iPad Battery Life (Look at pjl123 comment)
    https://discussions.apple.com/thread/3921324?tstart=30
    New iPad Slow to Recharge, Barely Charges During Use
    http://www.pcworld.com/article/252326/new_ipad_slow_to_recharge_barely_charges_d uring_use.html
    Tips About Charging for New iPad 3
    http://goodscool-electronics.blogspot.com/2012/04/tips-about-charging-for-new-ip ad-3.html
    How to Save and Prolong the battery life of your new ipad
    https://discussions.apple.com/thread/4480944?tstart=0
    Prolong battery lifespan for iPad / iPad 2 / iPad 3: charging tips
    http://thehowto.wikidot.com/prolong-battery-lifespan-for-ipad
    iPhone, iPod, Using the iPad Charger
    http://support.apple.com/kb/HT4327
    Install and use Battery Doctor HD
    http://itunes.apple.com/tw/app/battery-doctor-hd/id459702901?mt=8
    To Extend a Device’s Battery Life, Get to Know It Better
    http://tinyurl.com/b67c7xz
    iPad Battery Replacement
    http://www.apple.com/batteries/replacements.html
    In rare instances when using the Camera Connection Kit, you may notice that iPad does not charge after using the Camera Connection Kit. Disconnecting and reconnecting the iPad from the charger will resolve this issue.
     Cheers, Tom

Maybe you are looking for