Re: untrusted domain in certificate

From: Samuli L (lohva@rremove.hotmail.com)
Date: 06/07/02 

From: "Samuli L" <lohva@rremove.hotmail.com>
Date: Fri, 7 Jun 2002 09:46:20 +0300

"Ronen" <ronenk@tauex.tau.ac.il> wrote in message >
>
> I have a single, Enterprise Root CA server in my
> organization. When I try to access a service which
> consumes ssl, from outside my domain (even from inside the
> LAN), I get notification massage, says that the
> Certificate is issued by a company I dont trust & I should
> decide weather I want trust it or not. tried to install it
> on a DC, but it didn't help. How do I prevent it from
> happened?

That happens because your client computer doesn't trust your CA. You have to
get/install the CA certificate to your client computer. You can do this e.g.
http://server/certsrv webpage. After you have installed the CA certicifate,
verify that your CA name is listed on Trusted Root Certification Authorities
page in IE.

Relevant Pages

  • Re: Proposal for a new PKI model (At least I hope its new)
    ... That is say I trust Paul Rubin's public key. ... two basic reasons for the SSL server domain name certificate: ... certificates have to check with the domain name infrastructure to see ... CA/PKI industry is that public keys be registered with the domain name ...
    (sci.crypt)
  • Re: How do I store secrets?
    ... One of the aspects of digital signature verification that is too often ... since encrypted with the PRIVATE key for which you have, and TRUST, ... If the certificate is issued by a KNOWN and TRUSTED CA, ... Then you create a server ...
    (microsoft.public.dotnet.security)
  • Re: New Method for Authenticated Public Key Exchange without Digital Certificates
    ... you are referring to any situation where there might be some trust ... resorting again to the merged security taxonomy and glossary ... as definitions specifically within the context of a Public Key, ... Certificate, Certification Authority environment. ...
    (sci.crypt)
  • Re: verisign security,lol
    ... "Igor Tandetnik" wrote: ... In order to provide this trust, ... > certificate, and keeps the company's vital stats on file. ... Dont believe average user cares what ca is used anyways. ...
    (microsoft.public.vc.atl)
  • Re: PGP and S/MIME
    ... instead of delegating the authentication ... > *.p7s signature signed by someone you already put explicit trust in. ... > recommend my clients and customers to separate the root certificate ...
    (sci.crypt)