Can't install locally generated certificate ....

[Art Billings]

Hi all,
I'm really frustrated, and it doesn't look like there is an answer in sight.
I have a Vista Business laptop that is a member of a SBS 2003 domain.
Everytime I attempt to access the Remote Web Workplace, IE7 gives me an the
error "There is a problem with this website's security certificate". I
click the "Continue to this website (not recommended)." link. When I get to
the log in page I click on the Certificate Error. I view the certificate
and then click on the Install Certificate button, specify that I want it
stored in the Trusted Root Certificate Authorities store. The dialog tells
me that the import is sucessful, but when I check the Trusted Root
Certificate Authorities store, it isn't listed.

I have exported the certificate from the aforementioned dialog and attempted
to import the certificate from the cert manager import wizard, it again
tells me that the import is sucessful, but the certificate isn't listed in
the store.

Any ideas on what I should do next?

Thanks,
Art

 

[Guest]

Art I am seeing the same isue with the Java Based Client and I install the
certificate and I get the same info you did. I hope somebody has an answer
for this. I just want to get rid of the certificate error message.

 

[Haitao Li]

On Vista, a root certificate is imported into CA store by default, for
security reasons. If you really want it to be in root store, select root
store in the import wizard.

 

[Guest]

Haitao Li,
Hopefully this didn't copy twice since I am having network issues here.
Sorry, Can you be more specific please I have already tried the Trusted Root
Certificate Authorities store to no prevail.

 

[Haitao Li]

On the page that shows "Place all certificates in the following store"
option, select "Trusted Root Certification Authorities", then click Next.
I have seen a bug on some sysprep'ed Vista images where this does not work.
In that case, select "show physical stores" on "Select Certificate Store"
dialog, and select "Local Computer" under "Trusted Root Certification
Authorities". Note: everybody on the same machine will trust that root cert
after it's imported to local computer root store.

 

[Art Billings]

Tried to do what you suggest, but that physical store is one of the two
places where it can be stored. The two selections presented are "Registry"
and "Smart Card". Selected Registry, still doesn't work. The error
continues to come up.

Thanks for the suggestion.
Art

 

[Haitao Li]

Check if you have full control on this key:
HKCU\Software\Microsoft\SystemCertificates\Root\ProtectedRoots
If you don't, give yourself full control then it should work. You still need
to select root store, but no need to choose physical store.

"Local Computer" shows up when you are admin (including protected admin).

Haitao Li