[Okta Webinar] Learn how to a build a cloud-first strategyRegister Now

x
  • Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 1467
  • Last Modified:

SSL Certificate Errors on websites using https in IE8

I get Certificate Errors on every site that uses SSL. The Certificate Error appears in the Security Status bar (Fig 1). The certificates ARE valid on other sites. I have reset IE. I also went to Tools > Internet Options > Content tab, cleared SSL state. When I click on Certificates I see one that was installed for this user (Fig 2 & 3).  When I click Remove, it prompts saying, “You cannot decrypt data encrypted using the certificates. Do you want to delete the certificates?” (Fig 4). I also started getting this warning in QuickBooks stating, Security Alert: Revocation information for the security certificate for this site is not available. Do you want to proceed?” (Fig 5 & 6).

Any ideas. Images are attached.

Win 7 Pro, SP1 fully updated, workgroup
Cert---Popup-error.GIF
Cert-IE.GIF
Cert---Details2.GIF
Cert-Delete-Warning.GIF
Cert-Warning.GIF
Cert---Revocation-Info-Cert.GIF
0
Blue Street Tech
Asked:
Blue Street Tech
  • 23
  • 7
  • 5
  • +1
1 Solution
 
Blue Street TechLast KnightsAuthor Commented:
The article was semi-helpful, but can i remove them without issue? I don't use them for anyting that i know of.
0
 
Blue Street TechLast KnightsAuthor Commented:
Is there anything i should do before removing it?
0
Technology Partners: We Want Your Opinion!

We value your feedback.

Take our survey and automatically be enter to win anyone of the following:
Yeti Cooler, Amazon eGift Card, and Movie eGift Card!

 
IanThCommented:
as far as I know yes
0
 
Blue Street TechLast KnightsAuthor Commented:
It gives me that warning "You cannot decrypt data encrypted using the certificates." what data is it referring to?
0
 
Blue Street TechLast KnightsAuthor Commented:
I removed it...still get prompted on other websites. checking your link now.
0
 
Dave BaldwinFixer of ProblemsCommented:
Those screenshots are refering to programs that have probably put the certs there.  Leaving them there won't hurt anything.  Have you gone to Windows Update and updated your "root certificates"?  Those are the ones used for encrypting and decrypting data on your network connections.  Also, when you look at "About Internet Explorer", what
cipher strength does it list?  If you're in the US, it should say 128-bit, outside the US it may say 40-bit.  If it says 168-bit, that is a special mode for some federal standard that doesn't work with anything else.
0
 
Blue Street TechLast KnightsAuthor Commented:
Hi Dave.

I removed the only one under the personal section...sure hope that does not cause any issues.

Cipher strength says 256-bit.

What should i do so that https works on websites and so that i am not prompted in QuickBooks with the Security Alert: Revocation information for the security certificate for this site is not available?
0
 
Blue Street TechLast KnightsAuthor Commented:
I am in the USA too.
0
 
Dave BaldwinFixer of ProblemsCommented:
256-bit is available on Windows 7 but I'm on XP.  Go to Internet Options -> Advanced and make sure that SSL 2/3 and TLS are checked.
0
 
Blue Street TechLast KnightsAuthor Commented:
Ok. i did that. Which version of TLS should i check? Attached is what it was set to after i reset advanced settings to default. i will restart IE and test.
IE---Advanced-Otpions---SSL.GIF
0
 
Blue Street TechLast KnightsAuthor Commented:
It still prompts me. :(
0
 
Blue Street TechLast KnightsAuthor Commented:
I update the system clock as well just to make sure it was not effecting it.
0
 
Dave BaldwinFixer of ProblemsCommented:
In the Advanced tab, I would check them all at this point to see if anything makes the messages go away.
0
 
Blue Street TechLast KnightsAuthor Commented:
i checked them all...same issue. nothing changed after restart of IE.
0
 
Dave BaldwinFixer of ProblemsCommented:
Did you do the "root certificate" updates?
0
 
Blue Street TechLast KnightsAuthor Commented:
WUS has no updates for this PC. There is onlly an optional print driver. that's it.
0
 
Dave BaldwinFixer of ProblemsCommented:
According to http://support.microsoft.com/kb/931125 , it's automatic for Windows 7.  I don't know what else to say now.
0
 
Blue Street TechLast KnightsAuthor Commented:
This has started happening withing the last 2 weeks. I have had WIndows 7 for at least 1 yr now. So something is going on.

Do you think that if i uninstall/reinstall IE 8 that will solve the problem. I dont want to go through the process if it could be something else. Are you pretty positive form what i have told you that it is an IE issue?
0
 
Blue Street TechLast KnightsAuthor Commented:
Would restoring security setting in Windows help. Also, i have noticed that Spiceworks will come up in 404 errors or if page cannot dispay. I say this only if its helpful and may play a part in all of this. Thanks.
0
 
Dave BaldwinFixer of ProblemsCommented:
I don't know if it is just an IE issue.  Other programs often use IE for their own display needs.  You can download Firefox and see if it works ok.  I believe it has it's own certificate store.
0
 
Blue Street TechLast KnightsAuthor Commented:
yeah FF has no issues. but i want to correct this issue if possible. The user needs to use for some reason or another.
0
 
Dave BaldwinFixer of ProblemsCommented:
I guess uninstall/reinstall IE 8 is the next step.  Make sure and reboot in between operations.
0
 
David Johnson, CD, MVPOwnerCommented:
in ie8 when the user gets the certificate error have you tried putting that certificate in the trusted root certificate store?  Firefox allows an exception
0
 
Blue Street TechLast KnightsAuthor Commented:
When the drop down info bar appears i select allow blocked content and then it just repeates the process again. How do I add the cert to the trusted root? is that by installing cert? Thanks!
0
 
IanThCommented:
yes
0
 
Blue Street TechLast KnightsAuthor Commented:
i thought it used to give me a button to install cert. Am i missing something? see attachment.
install-cert1.GIF
0
 
IanThCommented:
I thought so too
0
 
David Johnson, CD, MVPOwnerCommented:
should have been under general view this screencast http://www.screencast.com/t/HTy1Qp903P6
0
 
Blue Street TechLast KnightsAuthor Commented:
Nope, not in general tab either. see attached.
install-cert---general-tab.GIF
0
 
Blue Street TechLast KnightsAuthor Commented:
What now? Will reinstalling IE fix this?

This is only happening on certain sites with SSL. Not all SSL sites any longer. I think that changed when i deleted the personal certs.
0
 
Blue Street TechLast KnightsAuthor Commented:
I reinstalled IE 8 and it did not fix anything!
Any other ideas?
0
 
Blue Street TechLast KnightsAuthor Commented:
i figured out why the option was not there...it appears that you need to add the site as a trusted site then the button appears. However, it still did not fix the issue after i added the cert successfully.
0
 
Blue Street TechLast KnightsAuthor Commented:
Thanks Vee_Mod! but I figured it out. I changed the ports from 80/443 to 9675/9676 (http/https) for access to spiceworks. Maybe this is something spiceworks does by design, but it resolved all issues.

Thanks for you help everyone!
0
 
Blue Street TechLast KnightsAuthor Commented:
I figured it out. I changed the ports from 80/443 to 9675/9676 (http/https) for access to spiceworks. Maybe this is something spiceworks does by design, but it resolved all issues.

Thanks for you help everyone!
0

Featured Post

Independent Software Vendors: We Want Your Opinion

We value your feedback.

Take our survey and automatically be enter to win anyone of the following:
Yeti Cooler, Amazon eGift Card, and Movie eGift Card!

  • 23
  • 7
  • 5
  • +1
Tackle projects and never again get stuck behind a technical roadblock.
Join Now