Avatar of CompGenHosp
CompGenHosp
 asked on

How to fix Certificate error on Windows XP Internet Explorer 8

I received certificate error in Windows XP IE 8: this is a problem with this web site security certificate. This certificate cannot be verified up to a trusted certificate authority. I installed this certificate but it did not help. Certificate has not been expired.
Web BrowsersSSL / HTTPSWindows XP

Avatar of undefined
Last Comment
johnb6767

8/22/2022 - Mon
avilov

where did you get that cert? you may need to install a bundle from that CA if they are not coming by default with your browser.

does that site work with other vendor browser on the same pc?
CompGenHosp

ASKER
Certificate was issued by remote.hoacny.com. It was working fine until now. Site works on another Windows 7 PC.
avilov

the cert is fine.

did you di windows update?

if you do, on the optional updates page, you should see root cert update, select that update as well as all security updates, that should help
Experts Exchange is like having an extremely knowledgeable team sitting and waiting for your call. Couldn't do my job half as well as I do without it!
James Murphy
johnb6767

More than likely, you are missing a Root CA from your local store......

Need to find out what RootCA is providing the verification on the Windows 7 machine, and import that certificate into your Trusted Root Certificate Authorities on teh problem box.....
johnb6767

Oh, and once you know which one it is on the working, just export it and import it into the bad one......
CompGenHosp

ASKER
to avilov: I ran all windows updates, but it did work.
to johnb6767: I have exported/imported working certificate but it did not solve the issue.

Additional info: if I logged on the same Win XP PC as Administrator, then I don't receive certificate error message. But if user logged on, certificated error shows up.

Please advise.  
⚡ FREE TRIAL OFFER
Try out a week of full access for free.
Find out why thousands trust the EE community with their toughest problems.
avilov

your cert is fine, it's not expiring anytime soon

since it work for admin, all certs are on that PC. you probably just need to copy/move them from admin account cert store to a Computer account.

to find which cert is incorrect, just open that cert (click on broken lock iconin your browser  and select view), go to certification path tab and check intermediate and root certs expiration dates.
johnb6767

But did you import/export the Trusted Root CA that might be missing?
CompGenHosp

ASKER
Yes, I did import/export the Trusted Root CA that might be missing from Window 7 PC to Windows XP Pc. Then I copy/moved them from admin account cert store to a Computer account.

And it still shows a message: "This certificate cannot be verified to a trusted certificated authority" under user logon.


Experts Exchange has (a) saved my job multiple times, (b) saved me hours, days, and even weeks of work, and often (c) makes me look like a superhero! This place is MAGIC!
Walt Forbes
johnb6767

is it a public site u could provide a link to?
CompGenHosp

ASKER
ASKER CERTIFIED SOLUTION
johnb6767

THIS SOLUTION ONLY AVAILABLE TO MEMBERS.
View this solution by signing up for a free trial.
Members can start a 7-Day free trial and enjoy unlimited access to the platform.
See Pricing Options
Start Free Trial
GET A PERSONALIZED SOLUTION
Ask your own question & get feedback from real experts
Find out why thousands trust the EE community with their toughest problems.
CompGenHosp

ASKER
Thank you johnb6767, it was already there. I imported it over again, just in case but still receive "This certificate cannot be verified to a trusted certificated authority".

This message only comes on under standard user, for administrator does not seem it is a problem.
⚡ FREE TRIAL OFFER
Try out a week of full access for free.
Find out why thousands trust the EE community with their toughest problems.
johnb6767

Since you put it that way.......

Process Monitor
http://www.microsoft.com/technet/sysinternals/utilities/processmonitor.mspx

Save this to the root of C as an Admin, and login the problem user. Do a RunAs with your Admin Credentials to launch it, and then set the the filter at the top to Include "Result" is "Access Denied" then "Include", and then try and recreate the errors by launching IE, and going to this site. Then go look at the logging, and it will tell you where the permissions are restrictive. Once you open those up, keep retrying until you get the desired results....

Keep track of your changes, as they can be scripted to deploy to the other systems......