There is a problem with this website's security certificate., IE8 only, Firefox fine
I have OWA set up on a a SBS2008 64 bit server.
It uses a Godaddy secure ceertificate for OWA access.
Everyone is fine, except one user for OWA access from their homes.
Even on this user, for Firefox it works fine. It's just Internet Explorer 8 that throws up the
"There is a problem with this website's security certificate" warning.
I have installed the certificate, but it makes no difference, it still throws up teh error.
It's obviously some problem with the local PC and probably some setting in Internet Explorer, as everyone else is fine.
Any ideas?
It uses a Godaddy secure ceertificate for OWA access.
Everyone is fine, except one user for OWA access from their homes.
Even on this user, for Firefox it works fine. It's just Internet Explorer 8 that throws up the
"There is a problem with this website's security certificate" warning.
I have installed the certificate, but it makes no difference, it still throws up teh error.
It's obviously some problem with the local PC and probably some setting in Internet Explorer, as everyone else is fine.
Any ideas?
ASKER CERTIFIED SOLUTION
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
JtR
Maybe your user has not the root certificate for the CA in his certificate storage? Check out if he can see ALL nescessary certificates in his browser!?
also maybe try http://www.sslshopper.com/ssl-checker.html to check your site.. you have indicated it will work fine with firefox, but this may identify the reason for the IE8 certification problem...
It seems most people can resolve it by following the steps in my post above.
It seems most people can resolve it by following the steps in my post above.
ASKER
I can see the certificate in installed.
I tried installing the gd_bundle.crt, but makes no difference.
I've noticed when I look at the Certificate path, the Certificate status says "The issuer of this certificate cannot be found"
Above that in the general tab, it says "Windows does not have enough information to verify this certificate".
I tried installing the gd_bundle.crt, but makes no difference.
I've noticed when I look at the Certificate path, the Certificate status says "The issuer of this certificate cannot be found"
Above that in the general tab, it says "Windows does not have enough information to verify this certificate".
ASKER
I ran that ssl checker on our site as well and it all checks out OK.
did you do this ?
Load an MMC console with "Certificates" snap in for the local computer & Computer Account. The go to Intermediate Certification Authorities. From there, go to the Certificates folder. Right click on the "Starfield Class 2 Certificate Authority" cert. You should see the "Disable all purposes for this certificate" selected... choose the top option "Enable all purposes for this certificate".
Load an MMC console with "Certificates" snap in for the local computer & Computer Account. The go to Intermediate Certification Authorities. From there, go to the Certificates folder. Right click on the "Starfield Class 2 Certificate Authority" cert. You should see the "Disable all purposes for this certificate" selected... choose the top option "Enable all purposes for this certificate".
ASKER
I didn't see anything called "Starfield Class 2 Certificate authority"
I saw "Godaddy Class 2 certificate authoirity" which had "Enable all purposes for this certificate" already set to enabled.
I saw "Godaddy Class 2 certificate authoirity" which had "Enable all purposes for this certificate" already set to enabled.
ASKER
I found an entry for godaddy in the "Trusted root certificates authority " certificate folder, I noticed it set only a list to enabled.
I set it to all and allpied.
The PC in question still came up with the same warning, but I wonder ifthere's a delay or something before the changed is picked up maybe?
I set it to all and allpied.
The PC in question still came up with the same warning, but I wonder ifthere's a delay or something before the changed is picked up maybe?
When you were having your cert issued it should have asked if you wanted a GoDaddy or Starfield. Which did you choose?
ASKER
I don't remember choosing Starfield, so it must have been Godaddy.
Taking this further, I had a different user remotely try to connect using IE version 8, the same version etc as the user who's having a problem and their OWA works fine, so it must be a problem specific to the PC for the user having issues.
His PC is a bit of a mess anyway, so it's possibly his IE install is just corrupted in some way.
I will try to run a few cleanups on the PC before taking this investigation any further.
Is it possible to allocate half points for your help? As you have pointed out some very useful checks, even though everything checked out ok?
Taking this further, I had a different user remotely try to connect using IE version 8, the same version etc as the user who's having a problem and their OWA works fine, so it must be a problem specific to the PC for the user having issues.
His PC is a bit of a mess anyway, so it's possibly his IE install is just corrupted in some way.
I will try to run a few cleanups on the PC before taking this investigation any further.
Is it possible to allocate half points for your help? As you have pointed out some very useful checks, even though everything checked out ok?
You can allocate the points to whoever you want....
ASKER
Did not resolve my issue actually, but was very useful information I was given.