Can not import SSL certificate into Internet Explorer 7

Posted on 2009-04-21
Last Modified: 2013-12-08
I had Windows XP Pro SP3 and Internet Explorer 7, now IE8.  I access an https site and receive Certificate Error.  I view certificate and perform manual installation into Trusted Root Certification Authority.  I get "Import was Successful".  Upon review, I see the certificate does NOT actually appear. I tried importing usung the mmc & Certificates snap-in.  Again, no success despite the Import was Successful notice.  When accessing Internet Options/Content Tab, a yellow bar says "some settings are managed by your system administrator".  I searched the web over and thought I found true love.... back up... and found copious pages suggesting  ""Security Zones: Use only machine settings" Group Policy setting is enabled" and Security_HKLM_only DWORD value is set to 1.

I did find Security_HKLM_only DWORD value set to 1, but when setting it to 0 and even removing it, I get access to the security settings but it makes no changes to the Content tab.

Grasping for straws, I upgraded to IE version 8.  No Change.

One snippet I found says, "If the Security Zones: Use only machine settings setting is not enabled in Group Policy, or if the Security_HKLM_only DWORD value does not exist or is set to 0, computer settings are used together with user settings. However, only user settings appear in the Internet Options. For example, when this DWORD value does not exist or is set to 0, HKEY_LOCAL_MACHINE settings are read together with HKEY_CURRENT_USER settings, but only HKEY_CURRENT_USER settings appear in the Internet Options."

All that said, where else might I look?
Question by:rwickersham
    LVL 50

    Expert Comment

    by:Steve Bink
    What is the certificate error you are receiving?

    If this error is related to a self-signed certificate or a variety of other technical certificate issues (expiration, pre-valid, wrong CN, etc), you will always receive that warning.  If the error is because you don't have a certificate for the issuer, then you need to find the *issuer's* certificate, and import that.

    Author Comment

    Q: What is the certificate error you are receiving?
    A:It is the usual error related to a self-signed certificate.

    As a rule, when this error appears I import the certificate into the Trusted Root Certification Authority.  Please re-read the my initial post.

    In this case, some configuration is preventing the importation of the certificate.
    LVL 50

    Accepted Solution

    >>> I import the certificate into the Trusted Root Certification Authority

    It's not the certificate you need to import into the trusted root, it is the CA certificate of the signing server.  

    Write Comment

    Please enter a first name

    Please enter a last name

    We will never share this with anyone.

    Featured Post

    How your wiki can always stay up-to-date

    Quip doubles as a “living” wiki and a project management tool that evolves with your organization. As you finish projects in Quip, the work remains, easily accessible to all team members, new and old.
    - Increase transparency
    - Onboard new hires faster
    - Access from mobile/offline

    When the confidentiality and security of your data is a must, trust the highly encrypted cloud fax portfolio used by 12 million businesses worldwide, including nearly half of the Fortune 500.
    This story has been written with permission from the scammed victim, a valued client of mine – identity protected by request.
    This Micro Tutorial will demonstrate how to add subdomains to your content reports. This can be very importing in having a site with multiple subdomains.
    Shows how to create a shortcut to site-search Experts Exchange using Google in the Chrome browser. This eliminates the need to type out whenever you want to search the site. Launch the Search Engine Menu: In chrome, via you…

    779 members asked questions and received personalized solutions in the past 7 days.

    Join the community of 500,000 technology professionals and ask your questions.

    Join & Ask a Question

    Need Help in Real-Time?

    Connect with top rated Experts

    21 Experts available now in Live!

    Get 1:1 Help Now