Solved

SSL Certificate Errors on websites using https in IE8

Posted on 2011-03-12
38
1,451 Views
Last Modified: 2012-06-21
I get Certificate Errors on every site that uses SSL. The Certificate Error appears in the Security Status bar (Fig 1). The certificates ARE valid on other sites. I have reset IE. I also went to Tools > Internet Options > Content tab, cleared SSL state. When I click on Certificates I see one that was installed for this user (Fig 2 & 3).  When I click Remove, it prompts saying, “You cannot decrypt data encrypted using the certificates. Do you want to delete the certificates?” (Fig 4). I also started getting this warning in QuickBooks stating, Security Alert: Revocation information for the security certificate for this site is not available. Do you want to proceed?” (Fig 5 & 6).

Any ideas. Images are attached.

Win 7 Pro, SP1 fully updated, workgroup
Cert---Popup-error.GIF
Cert-IE.GIF
Cert---Details2.GIF
Cert-Delete-Warning.GIF
Cert-Warning.GIF
Cert---Revocation-Info-Cert.GIF
0
Comment
Question by:diverseit
  • 23
  • 7
  • 5
  • +1
38 Comments
 
LVL 30

Expert Comment

by:IanTh
Comment Utility
0
 
LVL 24

Author Comment

by:diverseit
Comment Utility
The article was semi-helpful, but can i remove them without issue? I don't use them for anyting that i know of.
0
 
LVL 24

Author Comment

by:diverseit
Comment Utility
Is there anything i should do before removing it?
0
 
LVL 30

Expert Comment

by:IanTh
Comment Utility
as far as I know yes
0
 
LVL 24

Author Comment

by:diverseit
Comment Utility
It gives me that warning "You cannot decrypt data encrypted using the certificates." what data is it referring to?
0
 
LVL 30

Expert Comment

by:IanTh
Comment Utility
0
 
LVL 24

Author Comment

by:diverseit
Comment Utility
I removed it...still get prompted on other websites. checking your link now.
0
 
LVL 82

Expert Comment

by:Dave Baldwin
Comment Utility
Those screenshots are refering to programs that have probably put the certs there.  Leaving them there won't hurt anything.  Have you gone to Windows Update and updated your "root certificates"?  Those are the ones used for encrypting and decrypting data on your network connections.  Also, when you look at "About Internet Explorer", what
cipher strength does it list?  If you're in the US, it should say 128-bit, outside the US it may say 40-bit.  If it says 168-bit, that is a special mode for some federal standard that doesn't work with anything else.
0
 
LVL 24

Author Comment

by:diverseit
Comment Utility
Hi Dave.

I removed the only one under the personal section...sure hope that does not cause any issues.

Cipher strength says 256-bit.

What should i do so that https works on websites and so that i am not prompted in QuickBooks with the Security Alert: Revocation information for the security certificate for this site is not available?
0
 
LVL 24

Author Comment

by:diverseit
Comment Utility
I am in the USA too.
0
 
LVL 82

Expert Comment

by:Dave Baldwin
Comment Utility
256-bit is available on Windows 7 but I'm on XP.  Go to Internet Options -> Advanced and make sure that SSL 2/3 and TLS are checked.
0
 
LVL 24

Author Comment

by:diverseit
Comment Utility
Ok. i did that. Which version of TLS should i check? Attached is what it was set to after i reset advanced settings to default. i will restart IE and test.
IE---Advanced-Otpions---SSL.GIF
0
 
LVL 24

Author Comment

by:diverseit
Comment Utility
It still prompts me. :(
0
 
LVL 24

Author Comment

by:diverseit
Comment Utility
I update the system clock as well just to make sure it was not effecting it.
0
 
LVL 24

Author Comment

by:diverseit
Comment Utility
0
 
LVL 82

Expert Comment

by:Dave Baldwin
Comment Utility
In the Advanced tab, I would check them all at this point to see if anything makes the messages go away.
0
 
LVL 24

Author Comment

by:diverseit
Comment Utility
i checked them all...same issue. nothing changed after restart of IE.
0
 
LVL 82

Expert Comment

by:Dave Baldwin
Comment Utility
Did you do the "root certificate" updates?
0
Complete VMware vSphere® ESX(i) & Hyper-V Backup

Capture your entire system, including the host, with patented disk imaging integrated with VMware VADP / Microsoft VSS and RCT. RTOs is as low as 15 seconds with Acronis Active Restore™. You can enjoy unlimited P2V/V2V migrations from any source (even from a different hypervisor)

 
LVL 24

Author Comment

by:diverseit
Comment Utility
WUS has no updates for this PC. There is onlly an optional print driver. that's it.
0
 
LVL 82

Expert Comment

by:Dave Baldwin
Comment Utility
According to http://support.microsoft.com/kb/931125 , it's automatic for Windows 7.  I don't know what else to say now.
0
 
LVL 24

Author Comment

by:diverseit
Comment Utility
This has started happening withing the last 2 weeks. I have had WIndows 7 for at least 1 yr now. So something is going on.

Do you think that if i uninstall/reinstall IE 8 that will solve the problem. I dont want to go through the process if it could be something else. Are you pretty positive form what i have told you that it is an IE issue?
0
 
LVL 24

Author Comment

by:diverseit
Comment Utility
Would restoring security setting in Windows help. Also, i have noticed that Spiceworks will come up in 404 errors or if page cannot dispay. I say this only if its helpful and may play a part in all of this. Thanks.
0
 
LVL 82

Expert Comment

by:Dave Baldwin
Comment Utility
I don't know if it is just an IE issue.  Other programs often use IE for their own display needs.  You can download Firefox and see if it works ok.  I believe it has it's own certificate store.
0
 
LVL 24

Author Comment

by:diverseit
Comment Utility
yeah FF has no issues. but i want to correct this issue if possible. The user needs to use for some reason or another.
0
 
LVL 82

Expert Comment

by:Dave Baldwin
Comment Utility
I guess uninstall/reinstall IE 8 is the next step.  Make sure and reboot in between operations.
0
 
LVL 78

Expert Comment

by:David Johnson, CD, MVP
Comment Utility
in ie8 when the user gets the certificate error have you tried putting that certificate in the trusted root certificate store?  Firefox allows an exception
0
 
LVL 24

Author Comment

by:diverseit
Comment Utility
When the drop down info bar appears i select allow blocked content and then it just repeates the process again. How do I add the cert to the trusted root? is that by installing cert? Thanks!
0
 
LVL 30

Expert Comment

by:IanTh
Comment Utility
yes
0
 
LVL 24

Author Comment

by:diverseit
Comment Utility
i thought it used to give me a button to install cert. Am i missing something? see attachment.
install-cert1.GIF
0
 
LVL 30

Expert Comment

by:IanTh
Comment Utility
I thought so too
0
 
LVL 78

Expert Comment

by:David Johnson, CD, MVP
Comment Utility
should have been under general view this screencast http://www.screencast.com/t/HTy1Qp903P6
0
 
LVL 24

Author Comment

by:diverseit
Comment Utility
Nope, not in general tab either. see attached.
install-cert---general-tab.GIF
0
 
LVL 24

Author Comment

by:diverseit
Comment Utility
What now? Will reinstalling IE fix this?

This is only happening on certain sites with SSL. Not all SSL sites any longer. I think that changed when i deleted the personal certs.
0
 
LVL 24

Author Comment

by:diverseit
Comment Utility
I reinstalled IE 8 and it did not fix anything!
Any other ideas?
0
 
LVL 24

Author Comment

by:diverseit
Comment Utility
i figured out why the option was not there...it appears that you need to add the site as a trusted site then the button appears. However, it still did not fix the issue after i added the cert successfully.
0
 
LVL 24

Accepted Solution

by:
diverseit earned 0 total points
Comment Utility
Thanks Vee_Mod! but I figured it out. I changed the ports from 80/443 to 9675/9676 (http/https) for access to spiceworks. Maybe this is something spiceworks does by design, but it resolved all issues.

Thanks for you help everyone!
0
 
LVL 24

Author Closing Comment

by:diverseit
Comment Utility
I figured it out. I changed the ports from 80/443 to 9675/9676 (http/https) for access to spiceworks. Maybe this is something spiceworks does by design, but it resolved all issues.

Thanks for you help everyone!
0

Featured Post

What Should I Do With This Threat Intelligence?

Are you wondering if you actually need threat intelligence? The answer is yes. We explain the basics for creating useful threat intelligence.

Join & Write a Comment

OfficeMate Freezes on login or does not load after login credentials are input.
This paper addresses the security of Sennheiser DECT Contact Center and Office (CC&O) headsets. It describes the DECT security chain comprised of “Pairing”, “Per Call Authentication” and “Encryption”, which are all part of the standard DECT protocol.
This Micro Tutorial will go in depth within Systems and Security in Windows 7 and will go into detail regarding Action Center, Windows Firewall, System, etc. This will be demonstrated using Windows 7 operating system.
The Task Scheduler is a powerful tool that is built into Windows. It allows you to schedule tasks (actions) on a recurring basis, such as hourly, daily, weekly, monthly, at log on, at startup, on idle, etc. This video Micro Tutorial is a brief intro…

743 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

11 Experts available now in Live!

Get 1:1 Help Now