The “Access Denied” or “Error 15” message when trying to reach serviciosdigitales.imss.gob.mx is one of the most common problems faced by Mexican HR and payroll departments. This portal is essential for renewing digital certificates, registering employers, processing affiliation movements, and accessing IDSE. This guide covers the exact causes and step-by-step fixes — from browser incompatibility to Java configuration and corporate firewall issues.

The Error

The IMSS Digital Services portal displays different messages depending on the root cause:

  • “Access Denied” — blank or red screen with this message when loading the portal
  • “Error 15” or “Access error 15” — a specific IMSS portal code indicating missing permissions or an invalid session
  • “This site can’t be reached” — blocked by a corporate firewall or proxy
  • “Java plugin not found” or “Java required to continue” — Java not installed or incompatible version

The error typically appears when attempting to:

  1. Renew the IDSE digital certificate
  2. Register or update employer data
  3. Generate or download documents from the portal
  4. Process affiliation movements (enrollments, terminations, salary changes)
  5. Access the portal after a Windows update or hardware change

Root Cause

The serviciosdigitales.imss.gob.mx portal was built with legacy technology that depends on:

  • Internet Explorer and ActiveX components — the portal uses applets and controls that only work in IE or Edge’s IE mode
  • Java 8 (JRE) — Java 11 and later removed browser applet support; the IMSS portal requires Java 8
  • A valid digital certificate — if the certificate is expired or not installed in the correct Windows certificate store, the portal rejects the connection
  • Corporate firewall/proxy allowlisting — many companies block government domains as a security policy
  • SSL/TLS protocol mismatches — the portal uses older SSL protocols that modern browsers reject as insecure

Error 15 specifically is an invalid session code, which occurs when the browser cannot properly establish an authenticated session using the digital certificate.

Step-by-Step Solution

Step 1: Use Microsoft Edge in Internet Explorer Mode

Internet Explorer is no longer distributed with Windows 11 and was officially retired by Microsoft. However, Edge includes Internet Explorer Mode that replicates IE behavior for legacy sites.

  1. Open Microsoft Edge
  2. Click the menu (three dots) > Settings
  3. In the left panel, find Browser Compatibility (or search for “IE mode”)
  4. Enable “Allow sites to be reloaded in Internet Explorer mode (IE mode)”
  5. Under “Internet Explorer mode pages”, click Add
  6. Type https://serviciosdigitales.imss.gob.mx and click Add
  7. Restart Edge and navigate to the portal — you will see the IE icon in the address bar

Note: If your company manages devices via Group Policy, your IT administrator must enable IE Mode in Edge through corporate policies.

Step 2: Install Java 8 Correctly

  1. Uninstall all Java versions from Control Panel > Programs and Features
  2. Download Java 8 (JRE) from java.com/download
  3. Install with administrator privileges
  4. Open Control Panel > Java
  5. Go to the Security tab
  6. Set the security level to High (not Very High)
  7. Click Edit Site List and add: https://serviciosdigitales.imss.gob.mx
  8. Apply and close the control panel

Step 3: Clear Browser Cache

A corrupted cache can persist the error even after reconfiguring the browser.

  1. In Edge, press Ctrl + Shift + Delete
  2. Select time range: All time
  3. Check: Browsing history, Cookies and site data, Cached images and files
  4. Click Clear now
  5. Close Edge completely and reopen it

Step 4: Verify the Digital Certificate

  1. Press Windows + R, type certmgr.msc, and press Enter
  2. Navigate to Personal > Certificates
  3. Find the certificate issued by IMSS (usually contains your RFC or company name)
  4. Check that the “Expiration Date” column shows a future date
  5. If the certificate is expired, you will need to renew it through the portal (which requires resolving access first)

If you cannot find the certificate, you may need to import it from the .cer or .pfx file provided by the IMSS.

Step 5: Review Firewall and Proxy Settings

In corporate environments, the IT team should add the following exceptions:

  • Domain: *.imss.gob.mx
  • HTTP port: 80
  • HTTPS port: 443
  • Java RMI ports (if applicable): 1099, 1098

If you use a manually configured browser proxy, verify it is set to bypass proxy for .gob.mx sites.

Alternative Solution

If Edge IE Mode is unavailable (IT-managed device) or does not work, try these options:

Option A — Use a Windows 7 virtual machine with IE 11: Some payroll departments maintain an older VM solely to access the IMSS portal. It is an extreme solution but effective for environments where IT cannot configure IE mode.

Option B — Contact IMSS support: If the certificate is expired or you cannot access the portal by any means, call IMSS Digital: 800 623 2323 or visit your nearest IMSS Subdelegación. Staff can help reset your session or guide you through certificate renewal at the counter.

Option C — Use InPrivate mode: Browser extensions or stale cookies can sometimes block access. Open Edge in InPrivate mode (Ctrl + Shift + N), enable IE mode, and try accessing the portal from there.

Prevention

To prevent this problem from recurring:

  • Schedule certificate renewal at least 30 days before expiry — IMSS certificates are valid for 1 to 4 years depending on the type
  • Keep Edge updated and periodically verify that IE Mode is still configured (Edge updates can sometimes reset settings)
  • Do not auto-update Java — stay on Java 8 and disable automatic updates from the Java Control Panel (Update tab)
  • Document the configuration of Java and the browser so you can replicate it quickly on new machines
  • Back up the certificate as a password-protected .pfx file every time you renew it

”AccessControl: Access denied (read)” during IDSE certificate renewal

This specific error appears during the certificate renewal process. It is different from the general Access Denied and has its own detailed fix. See the dedicated guide for this error.

e.firma certificate error in IDSE

If the browser rejects the SAT e.firma certificate when authenticating with the IMSS portal, review the IDSE certificate and e.firma browser error guide.

Java plugin not detected

When the portal reports Java is not installed even though it is, the issue is usually that Java is not enabled for Edge’s IE mode. Check the dedicated Java error guide for IDSE.

SUA not syncing with the portal

If the SUA (Sistema Único de Autodeterminación) shows errors when connecting to the portal, verify that your SUA version is up to date. Older SUA versions have compatibility problems with portal updates.

Summary

  • The portal serviciosdigitales.imss.gob.mx requires Internet Explorer or Edge IE Mode — Chrome, Firefox, and regular Edge are not supported
  • Error 15 indicates an invalid session, usually caused by browser incompatibility or certificate issues
  • Java 8 is mandatory — modern Java versions do not work with this portal
  • Add the portal to the Java exception list and lower the security level to High
  • Clear the browser cache before each attempt if the error persists
  • On corporate networks, the firewall/proxy must have *.imss.gob.mx whitelisted
  • If nothing works, contact IMSS Digital: 800 623 2323