WGA Validation Issue

[Guest]

Background:

User notifies me that he has recieved a pop-up on his computer that informs
him that "This copy of Windows is not genuine". I am not sure how this can
be as the OS was installed as part of our volume license progam with the key
provided by Microsoft. I proceed to http://www.microsoft.com/genuine and try
to manually validate the copy of Windows XP SP2. I ok the warning about
installing the activex control and then I get a popup error that reads as
follows:

Internet Explorer - Security Warning
--------------------------------------------
Windows has found a problem with this file.

Name: LegitCheckControl.cab
Publisher: Unknown Publisher
----------------------------------------------
This file was blocked because it does not have a valid digital signature
that verifies its publisher.


I click OK to the error as it wil not allow me to proceed. The next option
is to follow another link for an alternate method of validation. I recieve
the same error.


Curious if this issue was central to one host or many, I tried to validate
multiple machines using the same method, and I recieve the same error on
all.

When I dig into the error I click on "Unknow Publisher" and go all the way
down the certificate chain to find the following certificate:

Issued to: Verisign Time Stamping Service CA
Issued By: Thawte Timestamping CA
Valid From: 12/03/2003 to 12/03/2013

That has this error:
Windows does not have enough information to verify this certificate.

I am at a loss! Any help would be appreciated.

 

[Guest]

Please follow this diagnostic troubleshooting procedure:

1. Download and run the MGA Diagnostic Tool:
http://go.microsoft.com/fwlink/?linkid=52012

2. After running the MGA Diagnostic Tool, click
on the "Windows" tab and then click on "Copy".

3. Next, visit the following website and create a post in the
"WGA Validation Problems" forum and paste the
results of the WGA Diagnostic Data in a detailed post.
http://forums.microsoft.com/Genuine/default.aspx?SiteID=25

4. A WGA troubleshooting specialist will analyze the data and
recommend an appropriate solution.

For more information please visit http://www.microsoft.com/genuine/

 

[Guest]

John,

Thanks for the information. I actually found the solution to my problem.
For some reason the bulk of the Trusted Root Certification Authorites had
been removed from all of the client machines. This was causing problems when
Windows was trying to match the publisher cert of the activex control to a
trusted root CA. When I reinstalled the Trusted CA's the validation works
like a charm! Thanks again for the help.