Solved

Imported certificates not appearing in IE certificate store

Posted on 2013-02-06
12
12,819 Views
Last Modified: 2013-03-06
Hi,
One of my web application is using certificate as authentication. I have imported that certificate in "personnel" certificate folder in certificate MMC successfully but that certificate is not coming in IE certificate store (internet option > contents > certificates > personal ) than i tried to import it from IE itself, it show import successfully but it still not appearing there and it cause my application not getting authenticated.

OS is windows 7 and IE version is 8 & 9.

Please help me as i m running late with my timelines.
0
Comment
Question by:pdixit1977
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 7
  • 3
  • 2
12 Comments
 
LVL 23

Expert Comment

by:Suliman Abu Kharroub
ID: 38861854
Is it a new certificate issued from internal CA ?
0
 

Author Comment

by:pdixit1977
ID: 38861865
Yes
and i have already install root CA which is appearing absolutely fine in IE's trusted root certification authority store
0
 
LVL 23

Expert Comment

by:Suliman Abu Kharroub
ID: 38861897
Do you select user certificate store when open MMC not computer store ?
0
Ransomware-A Revenue Bonanza for Service Providers

Ransomware – malware that gets on your customers’ computers, encrypts their data, and extorts a hefty ransom for the decryption keys – is a surging new threat.  The purpose of this eBook is to educate the reader about ransomware attacks.

 

Author Comment

by:pdixit1977
ID: 38862102
Yes, i do and same thing happens mean it showing in personnel folder of certificate MMC but again not in IE cert store.
0
 
LVL 33

Expert Comment

by:Dave Howe
ID: 38863172
Please confirm that you have the secret key for the certificate - either you imported a "pfx" file -or- the CSR was generated from that machine.

A certificate isn't enough to populate the user certificate store (I know, its badly named) - you need a secret key+certificate pair for that to happen.
0
 

Author Comment

by:pdixit1977
ID: 38869122
the CSR was generated form the same machine. The cert was .cer not .pfx

On other 2 machines, it was in .cer and works fine. The only difference between the working and non working systems is the working ones are laptops and non working ones are desktop.
0
 
LVL 33

Expert Comment

by:Dave Howe
ID: 38875840
ok then, on the machine generating a csr, the user who generated the csr should be able to import the cer and have a working keypair. That is because the procedure for generating a CSR itself creates the secret key, and importing the certificate re-unites the secret key with the signed public key (usually you can then re-export the pair as a pfx, but regardless, it should appear in the personal certs area as a keypair)

How did you generate the CSR? command line tool? Internet Explorer?
0
 

Author Comment

by:pdixit1977
ID: 38876852
we opened URL of our certificate server and submit request there.
0
 
LVL 33

Accepted Solution

by:
Dave Howe earned 500 total points
ID: 38880013
Ok then, what web browser did you use? if its IE, then it should send the private key to the windows keystore; if its firefox, then its now in firefox's own keystore and you need to import the new public certificate there.
0
 

Author Comment

by:pdixit1977
ID: 38880124
It is IE 8 & 9
0
 

Author Comment

by:pdixit1977
ID: 38958788
Finally the issue was with certificate, i exactly dont know what but it start working once i reissue certificate.
0
 

Author Closing Comment

by:pdixit1977
ID: 38958793
Thanks
0

Featured Post

Optimize your web performance

What's in the eBook?
- Full list of reasons for poor performance
- Ultimate measures to speed things up
- Primary web monitoring types
- KPIs you should be monitoring in order to increase your ROI

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

When you try to share a printer , you may receive one of the following error messages. Error message when you use the Add Printer Wizard to share a printer: Windows could not share your printer. Operation could not be completed (Error 0x000006…
Ever visit a website where you spotted a really cool looking Font, yet couldn't figure out which font family it belonged to, or how to get a copy of it for your own use? This article explains the process of doing exactly that, as well as showing how…
The viewer will learn how to successfully download and install the SARDU utility on Windows 7, without downloading adware.
If you’ve ever visited a web page and noticed a cool font that you really liked the look of, but couldn’t figure out which font it was so that you could use it for your own work, then this video is for you! In this Micro Tutorial, you'll learn yo…

631 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question