Solved

Self signed certificate warning messages

Posted on 2012-03-29
9
474 Views
Last Modified: 2012-04-01
Hi All,

I want to issue three self signed certificates.

I know how to create them, but the users browsers recieve the following message;

There is a problem with this website's security certificate.

I need to surpress this message for these three sites.
0
Comment
Question by:detox1978
  • 5
  • 3
9 Comments
 
LVL 7

Expert Comment

by:designatedinitializer
ID: 37781086
No luck.
You'll always get that message, since these are self-signed certificates.
Get a SSL certificate from a trusted certification authority, and you're good to go.
0
 
LVL 2

Author Comment

by:detox1978
ID: 37781100
Can I not add something to the trusted root authority certificate store?
0
 
LVL 7

Expert Comment

by:designatedinitializer
ID: 37781109
The users' browsers will always see it's a self-signed certificate.
That's the point of using certificates. If it was that easy to bypass, it wouldn't do much good, would it?..
0
 
LVL 2

Author Comment

by:detox1978
ID: 37781114
Having the user install the certificate is hardly by-passing the check.
0
Are your AD admin tools letting you down?

Managing Active Directory can get complicated.  Often, the native tools for managing AD are just not up to the task.  The largest Active Directory installations in the world have relied on one tool to manage their day-to-day administration tasks: Hyena. Start your trial today.

 
LVL 2

Author Comment

by:detox1978
ID: 37781140
This is for internal use only.  I noticed in IIS7 they have Domain Certificates.
0
 
LVL 7

Assisted Solution

by:designatedinitializer
designatedinitializer earned 250 total points
ID: 37781175
Ha! Sorry about that, I didn't realized it was for internal use...
Yes, you can install the CA as a trusted root in client machines.
In IE, you click on "View Certificates" when the error appears and then follow the instructions.
0
 
LVL 2

Author Comment

by:detox1978
ID: 37781237
managed to get it to work on my laptop via this guide;

http://www.robbagby.com/iis/self-signed-certificates-on-iis-7-the-easy-way-and-the-most-effective-way/


Is it possible to install the certificate via group policy?
0
 
LVL 21

Accepted Solution

by:
motnahp00 earned 250 total points
ID: 37781295
Yes, you can import certificates to machines via group policy.

Computer Configuration -> Policies -> Windows Settings -> Security Settings -> Public Key Policies

For your instance, I would add the CA Root cert to Trusted Root Certification Authorities.
0
 
LVL 2

Author Closing Comment

by:detox1978
ID: 37793683
thanks
0

Featured Post

Will my email signature work in Office 365?

You've built an email signature using raw HTML code in Office 365, but you can't review how it looks with Transport Rules. So you have to test it over and over again before it can be used. Isn't this a bit of a waste of your time? Wouldn't a WYSIWYG editor make it a lot easier?

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Since pre-biblical times, humans have sought ways to keep secrets, and share the secrets selectively.  This article explores the ways PHP can be used to hide and encrypt information.
Restoring deleted objects in Active Directory has been a standard feature in Active Directory for many years, yet some admins may not know what is available.
This tutorial will walk an individual through the steps necessary to configure their installation of BackupExec 2012 to use network shared disk space. Verify that the path to the shared storage is valid and that data can be written to that location:…
To efficiently enable the rotation of USB drives for backups, storage pools need to be created. This way no matter which USB drive is installed, the backups will successfully write without any administrative intervention. Multiple USB devices need t…

910 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

21 Experts available now in Live!

Get 1:1 Help Now