Trusting Certs from Non Trusted root

Trusting Certs from Non Trusted root
Secure Home | Search | About
Login Password
Register Now! Lost Password?
 Microsoft Applications Security    Post an article   get this group's latest topics as an RSS feed add this group's latest topics to your My MSN content add this group's latest topics to your My Yahoo content add this group's latest topics to your Google content
Subject Author Date
Trusting Certs from Non Trusted root =?Utf-8?B?VHJldm9ySg==?= 03-23-2007
Posted by =?Utf-8?B?VHJldm9ySg==?= on March 23, 2007, 6:38 pm
If you were  Registered and logged in, you could reply and use other advanced thread options
I work for a school which has internet access to the school network via a
https address. When connecting IE produces the following message: "The
security certificate presented by this website was not issued by a trusted
certificate authority." Although the certificate cannot be traced back, I
would like to avoid this message every time I log on. I have tried importing
the certificate and placing he site into my 'trusted sites' area, but to no
avail. Is there a way of achieving what I want to do?
TIA. Trevor


Posted by S. Pidgorny on March 24, 2007, 1:59 am
If you were  Registered and logged in, you could reply and use other advanced thread options
In IE security options, there's one which is to "Warn about invalid site
certificates". You cannot disable the warning for a single site though.

I suggest looking into the root issue and making the root which is always
used by your infrastructure trusted. Make sure you know why exactly you get
the warning.

--
Svyatoslav Pidgorny, MS MVP - Security, MCSE
-= F1 is the key =-

* http://sl.mvps.org * http://msmvps.com/blogs/sp *

>I work for a school which has internet access to the school network via a
> https address. When connecting IE produces the following message: "The
> security certificate presented by this website was not issued by a trusted
> certificate authority." Although the certificate cannot be traced back, I
> would like to avoid this message every time I log on. I have tried
> importing
> the certificate and placing he site into my 'trusted sites' area, but to
> no
> avail. Is there a way of achieving what I want to do?
> TIA. Trevor
>



Posted by =?Utf-8?B?VHJldm9ySg==?= on March 24, 2007, 4:53 am
If you were  Registered and logged in, you could reply and use other advanced thread options
Thanks for the reply.
I have tried talking to our IT people, but their response is 'It's only one
more click'. I (temporarily) tried unchecking the IE Warn about.... but that
didn't solve the problem.
You would have thought that you could 'import' a certificate from a trusted
site, even if it was not strictly valid.
Thanks again, I suppose that I will have to put up with the extra click.

Trevor


"S. Pidgorny <MVP>" wrote:

> In IE security options, there's one which is to "Warn about invalid site
> certificates". You cannot disable the warning for a single site though.
>
> I suggest looking into the root issue and making the root which is always
> used by your infrastructure trusted. Make sure you know why exactly you get
> the warning.
>
> --
> Svyatoslav Pidgorny, MS MVP - Security, MCSE
> -= F1 is the key =-
>
> * http://sl.mvps.org * http://msmvps.com/blogs/sp *
>
> >I work for a school which has internet access to the school network via a
> > https address. When connecting IE produces the following message: "The
> > security certificate presented by this website was not issued by a trusted
> > certificate authority." Although the certificate cannot be traced back, I
> > would like to avoid this message every time I log on. I have tried
> > importing
> > the certificate and placing he site into my 'trusted sites' area, but to
> > no
> > avail. Is there a way of achieving what I want to do?
> > TIA. Trevor
> >
>
>
>

Posted by Paul Adare on March 24, 2007, 5:04 am
If you were  Registered and logged in, you could reply and use other advanced thread options
On Sat, 24 Mar 2007 01:53:00 -0700, TrevorJ wrote:

> You would have thought that you could 'import' a certificate from a trusted
> site, even if it was not strictly valid.


You can, but the root certificate needs to be available.

--
Paul Adare
MVP - Windows - Virtual Machine
http://www.identit.ca
"The English language, complete with irony, satire, and sarcasm, has
survived for centuries without smileys. Only the new crop of modern
computer geeks finds it impossible to detect a joke that is not clearly
labeled as such."
Ray Shea

Posted by S. Pidgorny on March 24, 2007, 5:46 am
If you were  Registered and logged in, you could reply and use other advanced thread options
You can extract the root by analysing the certificate properties and add it
to the trusted root store...

The IT people are very unprofessional. It's one click too much.

--
Svyatoslav Pidgorny, MS MVP - Security, MCSE
-= F1 is the key =-

* http://sl.mvps.org * http://msmvps.com/blogs/sp *


> Thanks for the reply.
> I have tried talking to our IT people, but their response is 'It's only
> one
> more click'. I (temporarily) tried unchecking the IE Warn about.... but
> that
> didn't solve the problem.
> You would have thought that you could 'import' a certificate from a
> trusted
> site, even if it was not strictly valid.
> Thanks again, I suppose that I will have to put up with the extra click.
>
> Trevor
>
>
> "S. Pidgorny <MVP>" wrote:
>
>> In IE security options, there's one which is to "Warn about invalid site
>> certificates". You cannot disable the warning for a single site though.
>>
>> I suggest looking into the root issue and making the root which is always
>> used by your infrastructure trusted. Make sure you know why exactly you
>> get
>> the warning.
>>
>> --
>> Svyatoslav Pidgorny, MS MVP - Security, MCSE
>> -= F1 is the key =-
>>
>> * http://sl.mvps.org * http://msmvps.com/blogs/sp *
>>
>> >I work for a school which has internet access to the school network via
>> >a
>> > https address. When connecting IE produces the following message: "The
>> > security certificate presented by this website was not issued by a
>> > trusted
>> > certificate authority." Although the certificate cannot be traced back,
>> > I
>> > would like to avoid this message every time I log on. I have tried
>> > importing
>> > the certificate and placing he site into my 'trusted sites' area, but
>> > to
>> > no
>> > avail. Is there a way of achieving what I want to do?
>> > TIA. Trevor
>> >
>>
>>
>>



Similar ThreadsPosted
Clients no longer pick up the Root CA as a trusted root authority June 6, 2006, 6:59 pm
Options for Deploying Root and Int Certs to clients not part of do April 29, 2007, 1:50 pm
Updating Trusted Root CA May 6, 2008, 4:31 pm
shutting down a trusted CA and raising a new trusted CA July 14, 2005, 1:32 pm
Convert Enterprise Root CA to Standalone Root CA and create new Subordinate CAs March 19, 2008, 1:45 am
Migrating from single enterprise root CA to different root CA May 11, 2007, 6:43 am
PKI question, trusting subordinate CA January 1, 2006, 4:24 am
How do I delete my old ca certs... February 19, 2008, 10:45 am
Digital certs June 13, 2008, 11:17 am
subordinate ent CAs don't publish certs to AD after Win 2k3 SP1 July 23, 2005, 1:00 pm

The site map in XML format XML site map

Contact Us | Privacy Policy