Solved

Problem installing an ssl certifiicate into the intermediate certification authorities store

Posted on 2014-03-12
4
447 Views
Last Modified: 2014-03-12
Hello,
 We have a long term care website that keeps giving some windows xp computers the 'theres a problem with this websites certificate' warning after they log in. This is IE8. When I click on the certificate error and then install it, I tell it to put it on the trusted root or the intermediate but it always installs it under 'Other People'. This site works fine on my windows 7 machine and on some xp machines. I have installed the latest update of trusted root certificates from windows update. The time on the machines are correct. I've added the site to the trusted site section and re-installed the certificate but to no avail.
Is there any way I can get rid of this warning? Every pdf file they look at that opens a new window pops this warning up and it's a pain.

Thank you,
KB5
0
Comment
Question by:Kennyboy5
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 2
  • 2
4 Comments
 
LVL 29

Accepted Solution

by:
becraig earned 500 total points
ID: 39923992
Open the cert and look at the certification path tab.
Copy each of the certificates in the path to a .cer file

Open mmc.exe on the client
Add remove snap-in
Certificates
Local Machine

Go to the Trusted Root Certification authorities and expand -
Right click on the certificates folder and import
Navigate to the .cer file you saved from above that was at the "top" of the certification path.
go through the wizard until you finish.

Now go to Intermediate Certification Authorities and repeat the steps above for the certificate(s) that you saved below the root certificate you just imported.
*NOTE Once you identify the cert to install and it asked you where to install.
Click on "Browse" then click "Show Physical Stores" then expand Intermediate Certificate Authorities and click on Local Computer.


Once those are imported try loading again you should not see the error anymore.
0
 
LVL 4

Author Comment

by:Kennyboy5
ID: 39924078
Thanks becraig. I followed your steps. This is where it gets weird. When I go back in to mmc I can see the cert that I imported in both stores. Now if I go to Control Panel -->Internet Options-->Content tab-->Certificates the cert is not in there which is why now I'm getting the same warning. How can they be in the store but not in the store going through control panel?
0
 
LVL 29

Expert Comment

by:becraig
ID: 39924107
Can you try importing directly from there and see if that helps ?


You might also want to repeat those steps for current user instead of local computer and see if that fixes it.
0
 
LVL 4

Author Comment

by:Kennyboy5
ID: 39924471
Ok I've figured it out. On the connections tab in internet options I had a proxy server set of 0.0.0.0 and under Advanced I had certain webpages that were allowed. Once I removed the 'use proxy server' checkbox the cert finally showed up in the store. After that I could put the proxy back on and it still works.
Thanks for your help

KB5
0

Featured Post

On Demand Webinar - Networking for the Cloud Era

This webinar discusses:
-Common barriers companies experience when moving to the cloud
-How SD-WAN changes the way we look at networks
-Best practices customers should employ moving forward with cloud migration
-What happens behind the scenes of SteelConnect’s one-click button

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

#Citrix #Internet Explorer #Enterprise Mode #IE 11 #IE 8
Several part series to implement Internet Explorer 11 Enterprise Mode
Google currently has a new report that is in beta and coming soon to Webmaster Tool accounts. This Micro Tutorial will highlight new features for Google Webmaster Tools.
Two types of users will appreciate AOMEI Backupper Pro: 1 - Those with PCIe drives (and haven't found cloning software that works on them). 2 - Those who want a fast clone of their boot drive (no re-boots needed) and it can clone your drive wh…

734 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question