CompGenHosp
asked on
How to fix Certificate error on Windows XP Internet Explorer 8
I received certificate error in Windows XP IE 8: this is a problem with this web site security certificate. This certificate cannot be verified up to a trusted certificate authority. I installed this certificate but it did not help. Certificate has not been expired.
ASKER
Certificate was issued by remote.hoacny.com. It was working fine until now. Site works on another Windows 7 PC.
the cert is fine.
did you di windows update?
if you do, on the optional updates page, you should see root cert update, select that update as well as all security updates, that should help
did you di windows update?
if you do, on the optional updates page, you should see root cert update, select that update as well as all security updates, that should help
More than likely, you are missing a Root CA from your local store......
Need to find out what RootCA is providing the verification on the Windows 7 machine, and import that certificate into your Trusted Root Certificate Authorities on teh problem box.....
Need to find out what RootCA is providing the verification on the Windows 7 machine, and import that certificate into your Trusted Root Certificate Authorities on teh problem box.....
Oh, and once you know which one it is on the working, just export it and import it into the bad one......
ASKER
to avilov: I ran all windows updates, but it did work.
to johnb6767: I have exported/imported working certificate but it did not solve the issue.
Additional info: if I logged on the same Win XP PC as Administrator, then I don't receive certificate error message. But if user logged on, certificated error shows up.
Please advise.
to johnb6767: I have exported/imported working certificate but it did not solve the issue.
Additional info: if I logged on the same Win XP PC as Administrator, then I don't receive certificate error message. But if user logged on, certificated error shows up.
Please advise.
your cert is fine, it's not expiring anytime soon
since it work for admin, all certs are on that PC. you probably just need to copy/move them from admin account cert store to a Computer account.
to find which cert is incorrect, just open that cert (click on broken lock iconin your browser and select view), go to certification path tab and check intermediate and root certs expiration dates.
since it work for admin, all certs are on that PC. you probably just need to copy/move them from admin account cert store to a Computer account.
to find which cert is incorrect, just open that cert (click on broken lock iconin your browser and select view), go to certification path tab and check intermediate and root certs expiration dates.
But did you import/export the Trusted Root CA that might be missing?
ASKER
Yes, I did import/export the Trusted Root CA that might be missing from Window 7 PC to Windows XP Pc. Then I copy/moved them from admin account cert store to a Computer account.
And it still shows a message: "This certificate cannot be verified to a trusted certificated authority" under user logon.
And it still shows a message: "This certificate cannot be verified to a trusted certificated authority" under user logon.
is it a public site u could provide a link to?
ASKER CERTIFIED SOLUTION
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
ASKER
Thank you johnb6767, it was already there. I imported it over again, just in case but still receive "This certificate cannot be verified to a trusted certificated authority".
This message only comes on under standard user, for administrator does not seem it is a problem.
This message only comes on under standard user, for administrator does not seem it is a problem.
Since you put it that way.......
Process Monitor
http://www.microsoft.com/technet/sysinternals/utilities/processmonitor.mspx
Save this to the root of C as an Admin, and login the problem user. Do a RunAs with your Admin Credentials to launch it, and then set the the filter at the top to Include "Result" is "Access Denied" then "Include", and then try and recreate the errors by launching IE, and going to this site. Then go look at the logging, and it will tell you where the permissions are restrictive. Once you open those up, keep retrying until you get the desired results....
Keep track of your changes, as they can be scripted to deploy to the other systems......
Process Monitor
http://www.microsoft.com/technet/sysinternals/utilities/processmonitor.mspx
Save this to the root of C as an Admin, and login the problem user. Do a RunAs with your Admin Credentials to launch it, and then set the the filter at the top to Include "Result" is "Access Denied" then "Include", and then try and recreate the errors by launching IE, and going to this site. Then go look at the logging, and it will tell you where the permissions are restrictive. Once you open those up, keep retrying until you get the desired results....
Keep track of your changes, as they can be scripted to deploy to the other systems......
does that site work with other vendor browser on the same pc?