Re: untrusted domain in certificate

From: D. Cross [MS] (vaq130@hotmail.com)
Date: 06/07/02 

From: "D. Cross [MS]" <vaq130@hotmail.com>
Date: Fri, 7 Jun 2002 06:31:17 -0700

correct - all machines that connect to a server that has a cert issued by
your root, must also trust that root.

http://www.microsoft.com/technet/treeview/default.asp?url=/technet/prodtechn
ol/WinXPPro/support/tshtcrl.asp 

--
David B. Cross [MS]
--
This posting is provided "AS IS" with no warranties, and confers no rights.
"Samuli L" <lohva@rremove.hotmail.com> wrote in message
news:OtW4l#gDCHA.1980@tkmsftngp04...
>
> "Ronen" <ronenk@tauex.tau.ac.il> wrote in message >
> >
> > I have a single, Enterprise Root CA server in my
> > organization. When I try to access a service which
> > consumes ssl, from outside my domain (even from inside the
> > LAN), I get notification massage, says that the
> > Certificate is issued by a company I dont trust & I should
> > decide weather I want trust it or not. tried to install it
> > on a DC, but it didn't help. How do I prevent it from
> > happened?
>
> That happens because your client computer doesn't trust your CA. You have
to
> get/install the CA certificate to your client computer. You can do this
e.g.
> http://server/certsrv webpage. After you have installed the CA
certicifate,
> verify that your CA name is listed on Trusted Root Certification
Authorities
> page in IE.
>
>
>
>
>

Relevant Pages

  • Re: Certification Authority
    ... Server 2003 newsgroup. ... You need to install the Verisign certificate as your Master Certificate. ... they will get a "Child" certificate of the Verisign certificate. ... Any outside authentication can then follow the chain of trust all the way ...
    (microsoft.public.mac.office)
  • Certificate Authority
    ... Server 2003 newsgroup. ... You need to install the Verisign certificate as your Master Certificate. ... they will get a "Child" certificate of the Verisign certificate. ... Any outside authentication can then follow the chain of trust all the way ...
    (microsoft.public.windows.server.general)
  • Re: Certification Authority
    ... Server 2003 newsgroup. ... You need to install the Verisign certificate as your Master Certificate. ... they will get a "Child" certificate of the Verisign certificate. ... Any outside authentication can then follow the chain of trust all the way ...
    (microsoft.public.mac.office)
  • Re: How do I store secrets?
    ... One of the aspects of digital signature verification that is too often ... since encrypted with the PRIVATE key for which you have, and TRUST, ... If the certificate is issued by a KNOWN and TRUSTED CA, ... Then you create a server ...
    (microsoft.public.dotnet.security)
  • Re: How to automate this ... ?
    ... client unless you established trust to that server (that's basically what ... Domain membership and Group Policy is -- the server trusts the external ... Purchase a certificate from an established Certificate Registrar. ... make the IE to trust my own Microsoft CA? ...
    (microsoft.public.inetserver.iis.security)