Imported certificates not appearing in IE certificate store
Hi,
One of my web application is using certificate as authentication. I have imported that certificate in "personnel" certificate folder in certificate MMC successfully but that certificate is not coming in IE certificate store (internet option > contents > certificates > personal ) than i tried to import it from IE itself, it show import successfully but it still not appearing there and it cause my application not getting authenticated.
OS is windows 7 and IE version is 8 & 9.
Please help me as i m running late with my timelines.
One of my web application is using certificate as authentication. I have imported that certificate in "personnel" certificate folder in certificate MMC successfully but that certificate is not coming in IE certificate store (internet option > contents > certificates > personal ) than i tried to import it from IE itself, it show import successfully but it still not appearing there and it cause my application not getting authenticated.
OS is windows 7 and IE version is 8 & 9.
Please help me as i m running late with my timelines.
Suliman Abu Kharroub
Is it a new certificate issued from internal CA ?
ASKER
Yes
and i have already install root CA which is appearing absolutely fine in IE's trusted root certification authority store
and i have already install root CA which is appearing absolutely fine in IE's trusted root certification authority store
Do you select user certificate store when open MMC not computer store ?
ASKER
Yes, i do and same thing happens mean it showing in personnel folder of certificate MMC but again not in IE cert store.
Please confirm that you have the secret key for the certificate - either you imported a "pfx" file -or- the CSR was generated from that machine.
A certificate isn't enough to populate the user certificate store (I know, its badly named) - you need a secret key+certificate pair for that to happen.
A certificate isn't enough to populate the user certificate store (I know, its badly named) - you need a secret key+certificate pair for that to happen.
ASKER
the CSR was generated form the same machine. The cert was .cer not .pfx
On other 2 machines, it was in .cer and works fine. The only difference between the working and non working systems is the working ones are laptops and non working ones are desktop.
On other 2 machines, it was in .cer and works fine. The only difference between the working and non working systems is the working ones are laptops and non working ones are desktop.
ok then, on the machine generating a csr, the user who generated the csr should be able to import the cer and have a working keypair. That is because the procedure for generating a CSR itself creates the secret key, and importing the certificate re-unites the secret key with the signed public key (usually you can then re-export the pair as a pfx, but regardless, it should appear in the personal certs area as a keypair)
How did you generate the CSR? command line tool? Internet Explorer?
How did you generate the CSR? command line tool? Internet Explorer?
ASKER
we opened URL of our certificate server and submit request there.
ASKER CERTIFIED SOLUTION
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
ASKER
It is IE 8 & 9
ASKER
Finally the issue was with certificate, i exactly dont know what but it start working once i reissue certificate.
ASKER
Thanks