• Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 2215
  • Last Modified:

How to fix Certificate error on Windows XP Internet Explorer 8

I received certificate error in Windows XP IE 8: this is a problem with this web site security certificate. This certificate cannot be verified up to a trusted certificate authority. I installed this certificate but it did not help. Certificate has not been expired.
0
CompGenHosp
Asked:
CompGenHosp
  • 6
  • 5
  • 3
1 Solution
 
avilovCommented:
where did you get that cert? you may need to install a bundle from that CA if they are not coming by default with your browser.

does that site work with other vendor browser on the same pc?
0
 
CompGenHospAuthor Commented:
Certificate was issued by remote.hoacny.com. It was working fine until now. Site works on another Windows 7 PC.
0
 
avilovCommented:
the cert is fine.

did you di windows update?

if you do, on the optional updates page, you should see root cert update, select that update as well as all security updates, that should help
0
Improved Protection from Phishing Attacks

WatchGuard DNSWatch reduces malware infections by detecting and blocking malicious DNS requests, improving your ability to protect employees from phishing attacks. Learn more about our newest service included in Total Security Suite today!

 
johnb6767Commented:
More than likely, you are missing a Root CA from your local store......

Need to find out what RootCA is providing the verification on the Windows 7 machine, and import that certificate into your Trusted Root Certificate Authorities on teh problem box.....
0
 
johnb6767Commented:
Oh, and once you know which one it is on the working, just export it and import it into the bad one......
0
 
CompGenHospAuthor Commented:
to avilov: I ran all windows updates, but it did work.
to johnb6767: I have exported/imported working certificate but it did not solve the issue.

Additional info: if I logged on the same Win XP PC as Administrator, then I don't receive certificate error message. But if user logged on, certificated error shows up.

Please advise.  
0
 
avilovCommented:
your cert is fine, it's not expiring anytime soon

since it work for admin, all certs are on that PC. you probably just need to copy/move them from admin account cert store to a Computer account.

to find which cert is incorrect, just open that cert (click on broken lock iconin your browser  and select view), go to certification path tab and check intermediate and root certs expiration dates.
0
 
johnb6767Commented:
But did you import/export the Trusted Root CA that might be missing?
0
 
CompGenHospAuthor Commented:
Yes, I did import/export the Trusted Root CA that might be missing from Window 7 PC to Windows XP Pc. Then I copy/moved them from admin account cert store to a Computer account.

And it still shows a message: "This certificate cannot be verified to a trusted certificated authority" under user logon.


0
 
johnb6767Commented:
is it a public site u could provide a link to?
0
 
CompGenHospAuthor Commented:
0
 
johnb6767Commented:
Mine is in the Intermediate Certification Autorities, and I exported it here in case you dont have it..... Verify it is there on this system in general, and if not, DL it and import it to that store.....

Rename from .txt to .cer....
Verisign-Class-3-Secure-Server-C.txt
0
 
CompGenHospAuthor Commented:
Thank you johnb6767, it was already there. I imported it over again, just in case but still receive "This certificate cannot be verified to a trusted certificated authority".

This message only comes on under standard user, for administrator does not seem it is a problem.
0
 
johnb6767Commented:
Since you put it that way.......

Process Monitor
http://www.microsoft.com/technet/sysinternals/utilities/processmonitor.mspx

Save this to the root of C as an Admin, and login the problem user. Do a RunAs with your Admin Credentials to launch it, and then set the the filter at the top to Include "Result" is "Access Denied" then "Include", and then try and recreate the errors by launching IE, and going to this site. Then go look at the logging, and it will tell you where the permissions are restrictive. Once you open those up, keep retrying until you get the desired results....

Keep track of your changes, as they can be scripted to deploy to the other systems......
0
Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

Join & Write a Comment

Featured Post

Protect Your Employees from Wi-Fi Threats

As Wi-Fi growth and popularity continues to climb, not everyone understands the risks that come with connecting to public Wi-Fi or even offering Wi-Fi to employees, visitors and guests. Download the resource kit to make sure your safe wherever business takes you!

  • 6
  • 5
  • 3
Tackle projects and never again get stuck behind a technical roadblock.
Join Now