Certification Authority problems

[Arne And]

Hi

I have an Win 2003 SP1 server that I have installed Windows Certification
Authority on.

I have been able to create a Server Certificate and set up my website to use
SSL on port 443.

When I go too my website (https://www.domian.com) I get an Security Alert,
saying that it is a problem with the site`s security certificate.
I press the View Certificate button, and it says that "This Certificate
canot be verified up to a trusted certification authority"

I installed the certificate and press YES to proceed. I can get into my
website with no problem. If i close the browser, and open it again, type
https://www.domain.com I get the same Security Alert.

Can I get rid of this warning some how?

Regards

-AA-

 

[Brian Komar [MVP]]

Hi

I have an Win 2003 SP1 server that I have installed Windows Certification
Authority on.

I have been able to create a Server Certificate and set up my website to use
SSL on port 443.

When I go too my website (https://www.domian.com) I get an Security Alert,
saying that it is a problem with the site`s security certificate.
I press the View Certificate button, and it says that "This Certificate
canot be verified up to a trusted certification authority"

I installed the certificate and press YES to proceed. I can get into my
website with no problem. If i close the browser, and open it again, type
https://www.domain.com I get the same Security Alert.

Can I get rid of this warning some how?

Regards

-AA-

You need to ad the root CA of the certificate chain to the trusted root
store. There are a few ways to do it:

1) In a domain

Take the root CA certificate (.cer) and then have a member of the
Enterprise Admins run:
certutil -dspublish -f <rootCA.cer> RootCA
This will make the root CA certificate trusted by all members of the
forest

2) At a single workstation
Take the root CA certificate (.cer) and then have a member of the local
Administrators group run:
certutil -addstore -f Root <rootCA.cer>

This assumes that you have certutil installed at the computer (from the
win2k3 administration pack

Brian

 

[Arne And]

Thanx

Will look into it tomorrow

-AA-

You need to ad the root CA of the certificate chain to the trusted root
store. There are a few ways to do it:

1) In a domain

Take the root CA certificate (.cer) and then have a member of the
Enterprise Admins run:
certutil -dspublish -f <rootCA.cer> RootCA
This will make the root CA certificate trusted by all members of the
forest

2) At a single workstation
Take the root CA certificate (.cer) and then have a member of the local
Administrators group run:
certutil -addstore -f Root <rootCA.cer>

This assumes that you have certutil installed at the computer (from the
win2k3 administration pack

Brian