Solved

Problem installing an ssl certifiicate into the intermediate certification authorities store

Posted on 2014-03-12
4
434 Views
Last Modified: 2014-03-12
Hello,
 We have a long term care website that keeps giving some windows xp computers the 'theres a problem with this websites certificate' warning after they log in. This is IE8. When I click on the certificate error and then install it, I tell it to put it on the trusted root or the intermediate but it always installs it under 'Other People'. This site works fine on my windows 7 machine and on some xp machines. I have installed the latest update of trusted root certificates from windows update. The time on the machines are correct. I've added the site to the trusted site section and re-installed the certificate but to no avail.
Is there any way I can get rid of this warning? Every pdf file they look at that opens a new window pops this warning up and it's a pain.

Thank you,
KB5
0
Comment
Question by:Kennyboy5
  • 2
  • 2
4 Comments
 
LVL 28

Accepted Solution

by:
becraig earned 500 total points
ID: 39923992
Open the cert and look at the certification path tab.
Copy each of the certificates in the path to a .cer file

Open mmc.exe on the client
Add remove snap-in
Certificates
Local Machine

Go to the Trusted Root Certification authorities and expand -
Right click on the certificates folder and import
Navigate to the .cer file you saved from above that was at the "top" of the certification path.
go through the wizard until you finish.

Now go to Intermediate Certification Authorities and repeat the steps above for the certificate(s) that you saved below the root certificate you just imported.
*NOTE Once you identify the cert to install and it asked you where to install.
Click on "Browse" then click "Show Physical Stores" then expand Intermediate Certificate Authorities and click on Local Computer.


Once those are imported try loading again you should not see the error anymore.
0
 
LVL 4

Author Comment

by:Kennyboy5
ID: 39924078
Thanks becraig. I followed your steps. This is where it gets weird. When I go back in to mmc I can see the cert that I imported in both stores. Now if I go to Control Panel -->Internet Options-->Content tab-->Certificates the cert is not in there which is why now I'm getting the same warning. How can they be in the store but not in the store going through control panel?
0
 
LVL 28

Expert Comment

by:becraig
ID: 39924107
Can you try importing directly from there and see if that helps ?


You might also want to repeat those steps for current user instead of local computer and see if that fixes it.
0
 
LVL 4

Author Comment

by:Kennyboy5
ID: 39924471
Ok I've figured it out. On the connections tab in internet options I had a proxy server set of 0.0.0.0 and under Advanced I had certain webpages that were allowed. Once I removed the 'use proxy server' checkbox the cert finally showed up in the store. After that I could put the proxy back on and it still works.
Thanks for your help

KB5
0

Featured Post

Enabling OSINT in Activity Based Intelligence

Activity based intelligence (ABI) requires access to all available sources of data. Recorded Future allows analysts to observe structured data on the open, deep, and dark web.

Join & Write a Comment

Citrix XenApp, Internet Explorer 11 set to Enterprise Mode and using central hosted sites.xml file.
For both online and offline retail, the cross-channel business is the most recent pattern in the B2C trade space.
Shows how to create a shortcut to site-search Experts Exchange using Google in the Chrome browser. This eliminates the need to type out site:experts-exchange.com whenever you want to search the site. Launch the Search Engine Menu: In chrome, via you…
How to create a custom search shortcut to site-search Experts Exchange using Google in the Firefox browser. This eliminates the need to type out site:experts-exchange.com whenever you want to search the site. Launch your Bookmark Menu: Press 'Ctrl +…

757 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

22 Experts available now in Live!

Get 1:1 Help Now