Trusting Certs from Non Trusted root

Trusting Certs from Non Trusted root

Secure Home | Search | About
 Microsoft Applications Security    Post an article   get this group's latest topics as an RSS feed add this group's latest topics to your My MSN content add this group's latest topics to your My Yahoo content add this group's latest topics to your Google content
Subject Author Date
Trusting Certs from Non Trusted root TrevorJ 03-23-2007
Posted by Paul Adare on March 27, 2007, 8:43 pm
If you were  Registered and logged in, you could reply and use other advanced thread options
On Tue, 27 Mar 2007 16:55:41 -0700, TrevorJ wrote:

> Slavic. As you may have gathered, I am a bit of an ignoramus on things
> encription/certificates. When I looked at the cert, it was issued to:
> 24hrSchool... by: ClassServer. Is this what the problem is?
> When you talk about CA and CN, I don't know what these abbreviations mean
> so am at a bit of a los to understand these things.
> I agree with your other post .....'instead, they should make
> their root CA cert available and provide instructions on how to make it
> trusted.' and if I could find out how this is done, there is a possibility
> that I might be able to persuade them to do this.

This has nothing at all to do with self-signed versus non self-signed
certs. The problem is that you don't have the root cert installed and the
school in question has not made the root cert available in a publicly
accessible location so you can't install it from outside of their network.
There is nothing inherently wrong with this given that this is meant to be
a secure site that is only accessbile to those with accounts. Contact the
admins and ask them to send you a copy of their root cert, or just put up
with the error messages. Your connection, once you get past the errors, is
still encrypted.

--
Paul Adare
MVP - Windows - Virtual Machine
http://www.identit.ca
"The English language, complete with irony, satire, and sarcasm, has
survived for centuries without smileys. Only the new crop of modern
computer geeks finds it impossible to detect a joke that is not clearly
labeled as such."
Ray Shea

Posted by Paul Adare on March 27, 2007, 9:21 pm
If you were  Registered and logged in, you could reply and use other advanced thread options
On Tue, 27 Mar 2007 17:55:56 -0700, TrevorJ wrote:

> @lanwench. Thanks. The info on the link does not seem to be as extensive as
> that by Kerry or his link. As it happens, neither work for me. IE still comes
> up with the same old message (I have rebooted as well, just in case). Any
> other ideas chaps. Please!!!!


The cert you can see is not the root cert so neither the instructions
provided by Kerry or Lanwench are going to do you any good at all. If you
want to get rid of the error then you need to contact the admins at the
school and get them to send you a copy of the root cert.

--
Paul Adare
MVP - Windows - Virtual Machine
http://www.identit.ca
"The English language, complete with irony, satire, and sarcasm, has
survived for centuries without smileys. Only the new crop of modern
computer geeks finds it impossible to detect a joke that is not clearly
labeled as such."
Ray Shea

Posted by =?Utf-8?B?VHJldm9ySg==?= on March 28, 2007, 7:22 am
If you were  Registered and logged in, you could reply and use other advanced thread options
Paul.
Thanks for the info. I was beginning to realise that it was not going to be
easy peasy. The school are getting a new IT co-ordinator after Easter, so
what I'll do is have a word with him, and point him at this thread.
Thanks to all of you who have taken the time out to try to sort the problem
for me. I'll post here if I get any luck in sorting it.

Regards Trevor

"Paul Adare" wrote:

> On Tue, 27 Mar 2007 17:55:56 -0700, TrevorJ wrote:
>
> > @lanwench. Thanks. The info on the link does not seem to be as extensive as
> > that by Kerry or his link. As it happens, neither work for me. IE still
comes
> > up with the same old message (I have rebooted as well, just in case). Any
> > other ideas chaps. Please!!!!
>
>
> The cert you can see is not the root cert so neither the instructions
> provided by Kerry or Lanwench are going to do you any good at all. If you
> want to get rid of the error then you need to contact the admins at the
> school and get them to send you a copy of the root cert.
>
> --
> Paul Adare
> MVP - Windows - Virtual Machine
> http://www.identit.ca
> "The English language, complete with irony, satire, and sarcasm, has
> survived for centuries without smileys. Only the new crop of modern
> computer geeks finds it impossible to detect a joke that is not clearly
> labeled as such."
> Ray Shea
>

Similar ThreadsPosted
Clients no longer pick up the Root CA as a trusted root authority June 6, 2006, 6:59 pm
Options for Deploying Root and Int Certs to clients not part of do April 29, 2007, 1:50 pm
Updating Trusted Root CA May 6, 2008, 4:31 pm
shutting down a trusted CA and raising a new trusted CA July 14, 2005, 1:32 pm
Convert Enterprise Root CA to Standalone Root CA and create new Subordinate CAs March 19, 2008, 1:45 am
Migrating from single enterprise root CA to different root CA May 11, 2007, 6:43 am
PKI question, trusting subordinate CA January 1, 2006, 4:24 am
How do I delete my old ca certs... February 19, 2008, 10:45 am
Digital certs June 13, 2008, 11:17 am
subordinate ent CAs don't publish certs to AD after Win 2k3 SP1 July 23, 2005, 1:00 pm

The site map in XML format XML site map

Contact Us | Privacy Policy