• Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 16715
  • Last Modified:

Imported certificates not appearing in IE certificate store

Hi,
One of my web application is using certificate as authentication. I have imported that certificate in "personnel" certificate folder in certificate MMC successfully but that certificate is not coming in IE certificate store (internet option > contents > certificates > personal ) than i tried to import it from IE itself, it show import successfully but it still not appearing there and it cause my application not getting authenticated.

OS is windows 7 and IE version is 8 & 9.

Please help me as i m running late with my timelines.
0
pdixit1977
Asked:
pdixit1977
  • 7
  • 3
  • 2
1 Solution
 
Suliman Abu KharroubIT Consultant Commented:
Is it a new certificate issued from internal CA ?
0
 
pdixit1977Author Commented:
Yes
and i have already install root CA which is appearing absolutely fine in IE's trusted root certification authority store
0
 
Suliman Abu KharroubIT Consultant Commented:
Do you select user certificate store when open MMC not computer store ?
0
NEW Internet Security Report Now Available!

WatchGuard’s Threat Lab is a group of dedicated threat researchers committed to helping you stay ahead of the bad guys by providing in-depth analysis of the top security threats to your network.  Check out this quarters report on the threats that shook the industry in Q4 2017.

 
pdixit1977Author Commented:
Yes, i do and same thing happens mean it showing in personnel folder of certificate MMC but again not in IE cert store.
0
 
Dave HoweSoftware and Hardware EngineerCommented:
Please confirm that you have the secret key for the certificate - either you imported a "pfx" file -or- the CSR was generated from that machine.

A certificate isn't enough to populate the user certificate store (I know, its badly named) - you need a secret key+certificate pair for that to happen.
0
 
pdixit1977Author Commented:
the CSR was generated form the same machine. The cert was .cer not .pfx

On other 2 machines, it was in .cer and works fine. The only difference between the working and non working systems is the working ones are laptops and non working ones are desktop.
0
 
Dave HoweSoftware and Hardware EngineerCommented:
ok then, on the machine generating a csr, the user who generated the csr should be able to import the cer and have a working keypair. That is because the procedure for generating a CSR itself creates the secret key, and importing the certificate re-unites the secret key with the signed public key (usually you can then re-export the pair as a pfx, but regardless, it should appear in the personal certs area as a keypair)

How did you generate the CSR? command line tool? Internet Explorer?
0
 
pdixit1977Author Commented:
we opened URL of our certificate server and submit request there.
0
 
Dave HoweSoftware and Hardware EngineerCommented:
Ok then, what web browser did you use? if its IE, then it should send the private key to the windows keystore; if its firefox, then its now in firefox's own keystore and you need to import the new public certificate there.
0
 
pdixit1977Author Commented:
It is IE 8 & 9
0
 
pdixit1977Author Commented:
Finally the issue was with certificate, i exactly dont know what but it start working once i reissue certificate.
0
 
pdixit1977Author Commented:
Thanks
0
Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

Join & Write a Comment

Featured Post

Improved Protection from Phishing Attacks

WatchGuard DNSWatch reduces malware infections by detecting and blocking malicious DNS requests, improving your ability to protect employees from phishing attacks. Learn more about our newest service included in Total Security Suite today!

  • 7
  • 3
  • 2
Tackle projects and never again get stuck behind a technical roadblock.
Join Now