Internet Explorer Certificate error

Zoldy2000
Zoldy2000 used Ask the Experts™
on
hello we get this error when viewing a particular website only when using internet explorer.      Using firefox or chrome we do not get this error.     We have made many attempt to get rid of the error since I do not want to load firefox or chrome on our terminal servers.    We have tested on windows 2012 2008 as well as windows 7 8 and 10.     All of them receive this error when using internet explorer.

The error is "the security certificate was issued to a company you have not chosen to trust"

I have added the certificate to the local trusted store and the error still appears.    

is there any way to set an option to have internet explorer not check this which is what I assume firefox and chrome are doing.

All other related articles we have found have failed to resolve the issue.
Comment
Watch Question

Do more with

Expert Office
EXPERT OFFICE® is a registered trademark of EXPERTS EXCHANGE®
Skyler KincaidNetwork/Systems Engineer

Commented:
Is it an internal website or an external website? If it is external, what is the website?

Can you post screenshots of the cert error you are seeing in IE? Most cert issues are caused by web filtering or time issues on the workstation.

Author

Commented:
See Screen shot attached.
Capture.JPG
Skyler KincaidNetwork/Systems Engineer

Commented:
Can you click "view certificate" and send those screenshots please?
Starting with Angular 5

Learn the essential features and functions of the popular JavaScript framework for building mobile, desktop and web applications.

Author

Commented:
see attached
General.JPG
Path.JPG
Network/Systems Engineer
Commented:
As expected, your Fortinet is doing web filtering on the site or a site used by the site content.

When Fortinets do web filtering, they have to replace the cert on HTTPS traffic with their cert and that is why you are seeing the Fortigate cert.

The options are to install the Fortigate cert on all the clients, allow the sites in the filtering settings, or disable HTTPS scanning altogether on the Fortinet.

Author

Commented:
Why does using an alternate browser get around this issue?    Can you suggest the best solution out of the ones you proposed.   is disabling https scanning risky?     Is installing the fortinet cert difficult?

Author

Commented:
FYI disable SSL inspection as a test and it works.    Is that risky in your opinion?   I think it was just on by default
Skyler KincaidNetwork/Systems Engineer

Commented:
On the Fortinet? That is something you would want to chat with Fortinet support about. It does introduce some risk but it might be causing more issues that you are not aware of when it is enabled.

Check with support for details and possible workarounds. Fortinet support is typically really good.

Author

Commented:
Excellent!!!

Do more with

Expert Office
Submit tech questions to Ask the Experts™ at any time to receive solutions, advice, and new ideas from leading industry professionals.

Start 7-Day Free Trial