Re: Digital Certificates not validated after XP SP 1 Upgrade

From: Krish Shenoy[MSFT] (kshenoy_at_online.microsoft.com)
Date: 02/14/04 

Date: Fri, 13 Feb 2004 16:55:52 -0800

If I understand correctly you mean to say that the SSL client authentication
certificate used to access a web server does not seem to work after
installing XPSP1.
Can you perform the steps in the KB article below for schannel logging on
the web server to determine the reasons for the failure to authenticate the
client cert.
http://support.microsoft.com/default.aspx?scid=KB;EN-US;Q260729 

-- 
Krish Shenoy[MSFT]
This posting is provided "AS IS" with no warranties, and confers no rights.
"Dan F" <danf@qiproject.org> wrote in message
news:04CA1ECD-1FE6-4AEB-A1B1-F9A8F9CC03CF@microsoft.com...
> Hello!
>
> Our website uses Microsoft Certificate Services to accept cert requests,
have them approved or denied, then installed via the the web.  We use this
for client validation when the user logs in.
>
> Periodically our tech support has been getting reports of users who found
their certificate would not work -- after choosing the cert from the pop-up
window (on IE 5.5 or above), they would get a "Page Cannot be Displayed"
error.  Making a new request for a new cert and installing it seemed to
alleviate this problem.
>
> However this morning i came upon the error myself after installing WinXP
Service Pack 1.  The cert I had before I installed the new service pack
caused the error after the install.
>
> Previously, when trying to look for solutions for our users to this issue,
I did notice this KB article: http://support.microsoft.com/?kbid=811383 and
had installed the q811383.exe on my machine.  After the SP1 install I do see
the Q811383 in the list of "Update Versions".  My IE version num is
6.0.2800.1106.xpsp2.030422-1633
>
> Is this a known issue?
>
> -Dan

Relevant Pages

  • Re: OWA, SSL and Certificate question.
    ... using the exchange server itself as the certificate authority. ... My assumption was that installing the cert ...
    (microsoft.public.exchange.misc)
  • Re: Security Certificate Trust Problem
    ... It really sounds like the cert is revoked to me. ... "The security certificate was issued by a company you> have ... > 1) I have never chosen not to trust this "company" ... > 3) I did try installing the certificate as Trusted and the Wizard> reported ...
    (microsoft.public.windowsxp.help_and_support)
  • Re: Windows Mobile 5 and SSL Certs
    ... Installing Self Signed certificates to sync with their ... I didn't want to buy a certificate and this worked like a champ: ... I purchased the cert because I was unable to load the self-signed cert into ... But now I'm faced with perhaps installing a second cert ...
    (microsoft.public.windows.server.sbs)
  • Re: Outlook via the Web
    ... I have had it a few times where the certificate didn't seem to want to take. ... When you are first prompted for the cert, ... > installing the cert. ... > SBS Rocks! ...
    (microsoft.public.windows.server.sbs)
  • Re: MS02-018 Breaking ASP ODBC
    ... > after installing the latest security hotfixes as of April ... >>1) IIS 5 web server can't be contacted. ... >>before the patch and that fixed that problem. ... >>load some VB components that fail to connect to my Oracle ...
    (microsoft.public.inetserver.iis.security)