Over 1 million tech questions and answers.

The SSL certificate for this service cannot be trusted.

Q: The SSL certificate for this service cannot be trusted.

Hi All ,
How to fix this Vulnerability ?

The following certificate was at the top of the certificate
chain sent by the remote host, but it is signed by an unknown
certificate authority :


|-Subject : CN=
|-Issuer : CN=NACH-HYPERV


https://www.itu.int/rec/T-REC-X.509/en
https://en.wikipedia.org/wiki/X.509

Read other answers
RELEVANCY SCORE 200
Preferred Solution: The SSL certificate for this service cannot be trusted.

I recommend downloading and running Reimage. It's a computer repair tool that has been proven to identify and fix many Windows problems with a high level of success.

I've used it in the past to identify and fix everything from blue screens (BSOD's), ActiveX errors, corrupt files and processes, dll/exe/sys errors, recover lost memory, Windows update problems, defragging, malware removal etc.

You can download it direct from this link http://downloadreimage.com/download.php. (This link will automatically start a download of Reimage that you can save to your computer.)

RELEVANCY SCORE 81.6

Hi,
I am trying to install CA root certificate on Windows 7, IE 9.
Encounter error: "Untrusted Certificate".  "This certificate cannot be verified up to a trusted certificate authority."
I have tried to install the certificate to Trusted Root Certificate Authorities->local computer and import was successful. BUT on IE->Internet Options->Certificate->Trusted Root Certificate Authorities, I am unable to find this root CA on
the list.
On mmc->Certificates->Trusted Root Certificate Authorities->certificates, I am able to view this root CA.
I then restarted the IE and view the ssl site again but failed too, "Untrusted Certificate".
Anyone, any idea ?
Regards,
Eye Gee

A:Unable to Install Root CA Certificate - Certificate cannot be verified up to a trusted certificate authority.

May the following workarounds work for you:
Workaround 1:
Modify the Windows settings to allow the Update Root Certificate feature to update the root certificates automatically. For details, see the following Microsoft TechNet article:
Certificate Support and Resulting Internet Communication in Windows Server 2008
http://technet.microsoft.com/en-us/library/cc771121(WS.10).aspx
Workaround 2?
If the Update Root Certificate feature cannot automatically update the root certificates, you may contact the website vender to see if there is a hotfix can fix the issue.

Read other 8 answers
RELEVANCY SCORE 75.2

(I'm cross posting this from
https://answers.microsoft.com/en-us/ie/forum/ie11-windows_7/a-certificate-chain-processed-but-terminated-in-a/e6895c7e-c6b9-4a96-a5f5-a4dcd40b7b45 as directed by the forum moderator there.)
Hello,

First, I have reviewed the other posts with similar questions and noted that I can install the certificate into root certificates and most likely this problem will go away, some specifics:

1) When a client reported this error using a pop.secureserver.net on an outlook 2003 client, I just figured it was godaddy or the REALLY old Outlook client, but nonetheless, I went in to troubleshoot it and was convinced it was godaddy, but when I tried
to start my Outlook 2016 client on my Windows 10 computer on their network, I got the same error.  Two notes are important: 1) I use godaddy as well and 2) I used the same computer at a different client just yesterday without a single error message.
2) They use POP 995 w/ SSL & SMTP 465 w/ SSL to pop.secureserver.net & smtpout.secureserver.net repsectively
3) I called the company that manages their firewall and was told that everything was fine, but was sent a certificate from the firewall that might fix the problem.
4) The firewall company tells me they use a fortinet firewall

I have some questions that I'm hoping one of the experts here can answer for me:

- What in a firewall setup can cause a certificate to fail as listed in the subject?
- Is there a port or configuration change they... Read more

Read other answers
RELEVANCY SCORE 65.6

Very annoying problem.
XP Pro with IE6 on desktop computer.
Trusted Sites contains: https://pilotweb.nas.faa.gov

When ever I go to the following site I get a Security Alert that states that the certificate was issued by a company that I have not chosen to trust...would I like to proceed, or install the certificate. Normally, I just click "YES" to proceed and I get my data. Sometimes I'll re-install the certificate as if it will do any good for next time...but it doesn't.

Here's the URL:

https://pilotweb.nas.faa.gov/geo/fl...Z&icao_id=RDU&icao_id=RWI&radius=10&options=A

Any ideas of what I can do so that this site is always trusted and I no longer get the Security Alert?

Thanks so much,
Tom
 

A:IE6 trusted certificate

Read other 7 answers
RELEVANCY SCORE 64.8

My work involves several sites we use on a daily basis. One of these sites (via Chrome) has started coming back as "unsecure", and no fixes I've done are working. I've modified the settings (and then) turned off the warnings, I've added -ignore-certification-error to the shortcut properties, and I've added the site to the list of Trusted Sites. I still keep getting the damn "not secure" warning.

The PCs in question are Dell Optiplex 7040. Does anyone have any other ideas? I've looked at doing Copy To File for the site certification, but the one in question is grayed out.
 

Read other answers
RELEVANCY SCORE 64.8

Am running XP Pro SP3 on Dell Latitude D820.  All Windows XP & IE updates have been installed.
Suddenly, I am seeing (Topic) appearing when I attempt to login to some websites, even one for software downloaded from this site (Sun Trust...).
Most disturbing is that the login to one of my investment companies is now showing the "..not trusted" pop-up.  This is one of the largest investment companies in the U.S., so I doubt that there is a problem with their certificate, while I could easily believe that my local newspaper (another "not trusted") might not be up to date.
I have Norton installed and updated and have run Hitman, Emsisoft, AdwCleaner & ComboFix without incident but also without the desired result.
Any ideas?

A:Security Certificate not Trusted

Try installing this update http://www.microsoft.com/en-us/download/details.aspx?id=42092
 
It updates the list of root certificates on your PC (theses tell your PC how to recognise certificates that it should trust). The update is not installed automatically with other critical or important updates, so if you've only done those, you may have missed this one.

Read other 7 answers
RELEVANCY SCORE 64

I use the Chrome Browser for my internet surfing. When I attempt to log on to the Federal Government's website "ebenefits.gov", I get a warning that states "The sites security certificate is not trusted". I tell it to proceed anyway and it goes to the Veterans Administration website where I can check the status of a disability claim I filed last year. With Firefox, you could tell the browser to accept the certificate once, and it never asked presented the error again. With Chrome, you have to do it every time you go to the website. This is a primary government site for the VA and DOD and I trust it. Any idea how I can get Chrome to accept its certificate as valid? Thanks for reading and sharing.
 

A:This site's security certificate is not trusted

Make sure you have the correct date and time on your computer.
 

Read other 2 answers
RELEVANCY SCORE 63.6

Seems Comodo has inserted itself into my list of Trusted Publishers in IE8 and my "Remove" button is disabled. I don't appreciate this one bit, especially since one of the certs has expired. Is this normal or cause for concern? How can I get my Remove option back? Any suggestions much appreciated. Thanks a lot!

A:Comodo Certificate Signing in IE8 Trusted Publishers

i don't see this as an issue but you are right that there should be an opt-out.You could use DelDomains - but. as it states, it will remove everythingFirstly download: DelDomains.infLocate DelDomains.inf right-click and select: InstallNote: you will not see any on-screen action ...This will remove all entries in the Trusted, Restricted,and Enhanced Security Configuration Zones.Note once you do this, any previous restricted zone hacks (spywareblaster, ie-spyad, etc) will need to be reapplied.

Read other 3 answers
RELEVANCY SCORE 63.6

http://myonlinesecurity.co.uk/emet-4-0-emet-detected-ssl-certificate-facebook-com-trusted/

Facebook buttons and links are embedded in so many websites, that any user who has EMET 4.0 installed will get the alert when generally surfing the web. This alert does not mean in this particular case that there is a problem with Facebook or any hijack or divert is taking place. All this “EMET detected that the SSL certificate for *.facebook.com is not trusted” means is that the rule checking the certificates inside EMET has expired on 30 December 2013. It does not mean in this particular case that the Facebook SSL certificate has expired or that anybody is intercepting or diverting your secure SSL connection to Facebook.

There are 3 cures to stop the EMET detected that the SSL certificate for *.facebook.com is not trusted alert message:

By far Cure 1 is the safest to do. All that option 2 does is delay the warning until the new date you set.

1.Update EMET 4.0 to 4.1 by going to Microsoft EMET 4.1 download and download and install EMET 4.1. This installs over the top of EMET 4.0 and retains any specific rules and settings that you have configured yourself.

2.Open up EMET 4.0, click on TRUST ( CONFIGURE CERTIFICATE TRUST) –> Click on the Pinning Rules Tab –> Under Rule Expiration for FacebookCA you can change the rule to expire next month or later and the message will go away. You can set it to when the YahooCA rule will expire on 3/13/2014 if you like and you won’t rece... Read more

Read other answers
RELEVANCY SCORE 62

When I go through the MMC, I add the snap in for certificate. When I go through the import process for Trusted People, in Win 7 you can click "show physical stores" and "local computer" becomes an option for "trusted people".
I don't see this in Win 8. I see registry, enterprise, and group policy. Which do I use, or how do I get "local computer" to show up?

Read other answers
RELEVANCY SCORE 56.4

OS Version:  Windows 7 Enterprise x 86
IE Version:  IE 11
When a file is being downloaded from an internal website, an error prompt occurs, "certificate is not trusted".
However, it occurs, file can be downloaded properly.
If it can be controlled by Group Policy, please advise
Best solution: an error prompt can be suppressed

Read other answers
RELEVANCY SCORE 56.4

We are experiencing this problem with a few workstations and laptops and what we are currently doing is exporting the CA certificate from a workstation that has it in its store and importing it. The problem with this is that the certificate will eventually
expire and we will have to re import a new one again. I don't believe it is a group policy issue because other computers in the same OU are not missing the certificate.

Cany anyone shed light on how to troubleshoot this or how to force (if possible) the workstation to download the CA certificate?

Thank you in advance.
Jose

Read other answers
RELEVANCY SCORE 56.4

Hello,
I've a very nasty issue with root CA certificate that's disappearing from the trusted root authorities store. I'll shortly describe the environment: 
- Two tier PKI infrastructure with a offline, standalone root CA and a domain joined Enterprise issuing CA (both W2012R2); root CA certificate is published in AD
- There's a parent and child domain. Issuing CA lives in parent domain (2012R2 domain&forest level)
- Employees are working on a 2012R2 RDS&Citrix XenApp 76 server in the child domain
- In the parent domain several servers are using a SSL certificate signed by the company owned issuing CA; it's a SAN certificate
- The root CA's certificate is in the Trusted Root Certification Authorities store of all member servers in parent & child domain (so, that's also valid for the 2012R2 RDS servers)
The issue is that the certificate of the root CA that's in the trusted CA store of all RDS servers is being deleted on a regular base (at least once a day on each RDS-server). I enabled CAPI2 logging, but I couldn't find anything that makes sense. However
I'm able to reproduce this issue in very simple way: if I start IE11 on a RDS-server and browse to the IP-adres or NETBIOS-name of a webserver that host a site that's using a certificate from our PKI (so, it's clear that the URL isn't matching the names entered
in the SAN certificate) and I click on 'Continue to this website (not recommended)', the root CA's certificate is being removed from trusted... Read more

Read other answers
RELEVANCY SCORE 55.2

I have an issue where Trusted Installer Service is failing to run with the error <Failed to Read Description. Error Code: 193 > 
When I try to start it manually I get "Windows could not start the trustedinstaller service on local computer. Error 216: 0xd8"

I believe this is stopping me from upgrading to windows 10. Any advice on how to rectify this situation would be most grateful. FYI
sfc /scannow does not run (I believe because of this)
Windows refresh wont run (I believe because of this)
Thanks in advance for your help

Read other answers
RELEVANCY SCORE 54.8

Hello,
I have ATT.NET. I use google chrome as my browser. For the last few weeks, when I go to ATT.NET and go to my mail,,,, a red screen appears and says " security sertificate not trusted, dont proceed. I proceed anyway to get to my email,, but I cant tell if im secure or not. Happens on some other sites as well. Someone said to check my time and date on my computer. I is up to date. Can anyone help me ???
Thanks
 

A:" security certificate not trusted "

Read other 16 answers
RELEVANCY SCORE 54.8

Hello 

After Install Windows 7 and windows 10 on  trusted  root certificate  i get minimal Certificate i need all Certificate 

for example ( verisign, comodo)

i work offline ,  no Wsus Server 

Read other answers
RELEVANCY SCORE 53.6

Hello,

I am trying to resolve an issue where multiple client computers in the organisation are using an internally deployed Root CA certificate (before my time and no longer required) to sign the end entity certificate for external websites, google.co.uk
for example. All SSL sites appeared to be affected by this.




However this is not the case as sub domains of sites with issues show the correct cert chain, the below is for mail.google.com




Removing or untrusting this root ca cert breaks access to these sites.

I have reset root certs in various ways, removed machines from the domain, applied no GPOs, manually updated CRL and pulled down updated certs with rootsupd.exe.
It always attempts to use this rouge CA cert to sign the websites cert.

Any assistance would be much appreciated.

Read other answers
RELEVANCY SCORE 51.6

I have a wildcard cert from Go Daddy that is expiring in our lab, so I decided to use our new CA in LAB to create a certificate for MS ATA. when I go to setup the Gateway package on a domain controller I can not get the installer to accept the certificate.
I have put the cert in the personal store just like the existing cert, but no luck on getting to accept any cert I create.


I have it on good authority that if you type Google into Google you will bring down the internet...

A:Gateway Service SSL Certificate requirements for MS ATA

I found the fix below are the requirements

    Certificate must have a private key
    Certificate must be CSP
    The certificate's public key length is 2048 bit
In my cert template on my CA I had to enable the option for the private key to be exportable

I have it on good authority that if you type Google into Google you will bring down the internet...

Read other 1 answers
RELEVANCY SCORE 51.6

I have loaded Certificate Server off of the NT Option Pack onto my IIS 4.0 Web Server. I get a message on startup that the Certificate Authority Service cannot find a database. It gives me a 7000 and 7004 error. I looked up the problem on Technet and all I can find are a reference in the SP 4 Release Notes which says that there are no workarounds for the problem. Surely to Bill I am not going to have to remove Service Pack 5 and put Service Pack 3 on my Web Server in order to get Certificate Server to work! Has anyone else experienced this problem trying to run Certificate Server on later SP's? Does anyone know a workaround for this problem?
 

A:Certificate Server and Service Pack 5

I don't know what certificate srver is, but perhaps you could try service pack 6a??
 

Read other 1 answers
RELEVANCY SCORE 50

Windows 7 sp1 64, Dell Studio 1747 laptop.
Initial report was that an iPhone driver would not install because its publisher could not be verified.


I noted in passing that Windows Update had also stopped working, by the looks of things a few weeks ago. On attempting to check for updates, the control panel applet reports that the Windows Update Service is not running, yet it and BITS clearly are running.
I downloaded MBSA and attempted to get updates manually. This also failed with the report that wuredist.cab is corrupted.

I then noticed that on opening an elevated command prompt, UAE reports that the publisher of cmd.exe could not be verified.


Running sfc /scannow results in a log containing numerous (incomprehensible) errors and no checks performed. I think it was trying to say that it couldn't get the publisher info for the original files, so took no action.


There seems to be a common element here, in that certificates are not being recognised. That would of course explain all of the above symptoms. The cryptography service appears to be running OK, though, and restarting it doesn't help. I was able to replicate
the symptoms listed on a VM by disabling the cryptography service, which suggests we're on the right track. But, not sure what the actual issue with certs/crypto is.


-Any suggestions? (Reposted as previous post seems to have vanished)

Read other answers
RELEVANCY SCORE 48.8

Hi,
I'm running MS ATA 1.9.7312.32791 and haven't had any issues for close to two years.
I noticed yesterday that I didn't receive my daily emails from MS ATA so this morning I checked the ATA server and my event log is full of this message:
The Microsoft Advanced Threat Analytics Center service terminated unexpectedly.  It has done this 14 time(s).  The following corrective action will be taken in 5000 milliseconds: Restart the service.
I went and checked the log files and in the Errors log file I see this message logged over and over:
Error [CertificateExtension] Microsoft.Tri.Infrastructure.Utils.ExtendedException: There are no matching certificates [StoreLocation=LocalMachine StoreName=My thumbprint=660CXXXXXX]
So I checked the certificates on the server and I can't find a certificate with the thumbprint of 660CXXXXXX.
If I look in MMC I do see the certificate for the server and it has shows that it was recently renewed (probably automatically thru Active directory)
I can't access the ATA website on the server to specify the new certificate.
How can I fix this?  Do I need to re-install ATA.  If I re-install will I lose all the information that has already been collected?
Thanks in advance,
Nick

Read other answers
RELEVANCY SCORE 45.2

Is there a rvkroots.exe available for download for the mentioned KB so that I can remediate a Nessus finding?
We are on a disconnected network so windows update is disabled in our network.
In the past we are able to just download rvkroots.exe and push it out to all our Win7 computers.

Read other answers
RELEVANCY SCORE 45.2

so whats up with this error message ??
Revocation information for the security certificate for this site is not available. Do you want to proceed? [Yes] [No] [View certificate]


i know it can be unchecked in security option under advanced. but is that really safe to do ???

Thx


Steven J Einhorn

Read other answers
RELEVANCY SCORE 45.2

I have some Windows 7 systems which have not run Windows Updates for many years, and cannot due to regulatory reasons.   We rely upon Windows to automatically update the Trusted Root Certificate store whenever we browse to a web site/web service
that uses a certificate the system doesn't recognize. 
Sometime recently, the Trusted Root Certificate Store no longer updates automatically.  The Windows Event Log shows an error stating that the certificates cannot be downloaded from:
http : // ctldl.windowsupdate.com/msdownload/update/v3/static/trustedr/en/authrootstl.cab
If we browse to this location manually, the cab file contains an invalid Microsoft certificate. 

This was also an issue in Sept 2018.  At that time, the certificate had expired, and Microsoft eventually updated the certificate to resolve the issue.   This time, the certificate does not appear to have expired.  Why is the certificate
invalid this time, and can Microsoft fix it again?

Thanks

Read other answers
RELEVANCY SCORE 44.8

I bought a Smart Card reader. Its instruction manual directs the user to "disable the 'Certificate Propagation' service from Service.msc in order for the card reader to function properly under Windows 7."

Should I do that?

A:Can I disable the "Certificate Propagation" service?

Is the smart card reader labeled as plug and play? If yes, see the first note in this TechNet bulletin:

Certificate Propagation Service

Read other 5 answers
RELEVANCY SCORE 44.4

Hiya

This update addresses the "Certificate Renewal Wizard Concatenates Certificate" issue in Internet Information Services (IIS) 5.0, and is discussed in Microsoft Knowledge Base (KB) Article Q325827. Download now to correct this issue for IIS 5.0

System Requirements
Supported Operating Systems: Windows 2000

Internet Information Services 5.0
Windows 2000 Professional
Windows 2000 Server
Windows 2000 Advanced Server

http://www.microsoft.com/downloads/...43-c72f-4652-b912-065ee2a83c02&DisplayLang=en

Regards

eddie
 

Read other answers
RELEVANCY SCORE 44.4

Hi,

Really confusing one here. Since this weekend (16/17 July) we have started getting Certificate errors on some sites and applications. This seems to be due to the structure of the URL compared to the "advertised" name IIS is presenting. I'll try
to explain.
I have a site, Website. This is in my domain, domain.com. Therefore the FQDN is website.domain.com. IIS is running and I can access this site through FQDN,NetBIOS or IP address. Good news.
I create a certificate for the server using the FQDN as the subject, I add the Netbios and IP addresses in the Subject Alternate Names and Bind this to port 443 on the server.
I browse to https://website and all is good. I browse to https://website.domain.com I get a certificate error. Checking the certificate, everything is fine, no errors, chain is trusted. open Chrome and do the same, I get that the certificate website.domain.com
is being presented by Website and may not be the site I want.
Using either URL has never been a problem until this weekend, but it seems that IE/Windows/IIS is not liking any URL that is not EXACTLY what IIS is presenting. so my questions are:-
Is anyone else finding this?
Can we issue a certificate that covers all possible DNS resolutions for a site?
How do I control WHAT IIS advertises itself as?
SO far this has affected two major systems on our network and I can see that more will arise, so any help would be appreciated.

Read other answers
RELEVANCY SCORE 44.4

In Internet Explorer, when I get a certificate error, if I continue to the web site, I can then view the certificate to see what was wrong.  However, obviously it would be preferable* to see the certificate
before I make the decision to go to the site.  Is this possible?  I'm sure I could use another browser that does this, or maybe use the F12 developer tools, or write a program.   But I'm looking
for a normal-user way to do it.  I think it used to be possible in Internet Explorer, but this might have been 6.x or even earlier.  Or even
way earlier.  Yep.  I'm that old.  I believe this feature is not in Edge either...unless I'm just missing it.  But I'm using ie11 right now.
*understatement level is set to "high".

Read other answers
RELEVANCY SCORE 44.4

I have Windows 7 client and Cisco router is configured as Certificate Authority. Cisco calls it IOS CA. How can I do certificate enrollment of Windows 7 client with my Cisco IOS Certificate Authority?

Read other answers
RELEVANCY SCORE 44.4

Can someone walk me through the steps of having Advanced Threat Analytics (ATA) request a new certificate from Active Directory Certificate Services (ADCS)?  I'm not familiar with either product so I will need detailed steps please.  At a high-level
i'm guessing
1. ATA issues a certificate request
2. I send the request to ADCS
3. ADCS issues a cert for that request
4. Install new cert in ATA
I'll need detailed command line statements.  My ATA Center server is named ATASERVER.DOMAIN.ORG, and I but the URL is configured as ATACENTER.DOMAIN.ORG in ATA.  Can the cert handle both the servername and the URL?
Thank you in advance!

Read other answers
RELEVANCY SCORE 43.6

Hi,
Having some fun with a windows 7 setup of DirectAccess, have it configured to use ECC certificates on the client for the IPSec authentication, which was working brilliantly, we even have it loaded up behind a Citrix Netscaler to do SSL offloading of the
HTTPS tunnel encryption. But when trying to get Client Preauthentication working, we hit a snag, it seems that the NetScalers dont support ECC certificates, which is a pain, but something we thought we could work around by using an RSA certificate on the client
to performed the pre-authentication (as shown here https://directaccess.richardhicks.com/2016/05/10/directaccess-ip-https-preauthentication-using-citrix-netscaler/).
So we have three CA's, CA1/2 issue RSA certs and CA3 is setup to do the ECC ones, so nice separation of the chains.
So we have our Cert chain for RSA loaded into the load balancer and a new cert issued to the client from CA1... But, every time the client connects to the server (LB) we see the handshake taking place, the server sends a list of its DNs (CA1/2) (https://blogs.msdn.microsoft.com/kaushal/2015/05/27/client-certificate-authentication/)
to the client, but then the client looks in its store, picks out the ECC certificate (issued from CA3) and fails to authenticate saying no suitable certificate can be found, its like its not even looking at the RSA one at all.
So, thinking something was wrong with the way the LB was asking for client authentication, I tried deleting the ECC cert a... Read more

Read other answers
RELEVANCY SCORE 43.6

Good Day



We have a problem where we encrypted files using EFS, however we can't access or decrypt these files now.

We have the certificate in the certmgr.msc but we do see that the key is missing.



I have reproduced this on another computer and was able to run certutil -repairstore -user MY "Serial Number" which worked in repairing the store and files was decryptable again.

However on the machine that encrypted the files that we need to access this is not the case as there is a popup asking for your Smart Card.

We are not using Smart Cards at all, and have had a look at the following article regarding this issue, but the hotfix didn't work: https://support.microsoft.com/en-us/kb/2955631




I have software that can remove the encryption but will require the .pfx file, which can't be exported as the certstore doesn't show that it still has this.



It is a self signed certificate generated by Windows, so I can't request a new one using the CA.


Thanks for your help in advance.

Read other answers
RELEVANCY SCORE 42.4

seems that "Microsoft Certificate Trust List Publisher" Certificate Valid:01.27.2017-04.12.2018 is missing following EKU
'Microsoft Trust List Signing' (1.3.6.1.4.1.311.10.3.1) ?!
-ExtendedKeyUsage
     -Usage
          [ oid] 1.3.6.1.4.1.311.10.3.1
          [ name] Microsoft Trust List Signing
-ErrorStatus
     [ value] 10
     [ CERT_TRUST_IS_NOT_VALID_FOR_USAGE] true
Note: KB2328240 is imho not permanently fixing this problem ! (*curing only some derivated symptoms)

Read other answers
RELEVANCY SCORE 42

I based my actions amongst others on this source:https://www.adlerweb.info/blog/tag/procurve I am using openssl to create my own CA for my company's switches etc.  and i am having trouble with a number of recent procure switches. I created a root CA (2048 bits rsa, sha1 so as not to make things too difficult)I created a custom TA called "netwerk", uploaded the CA root certificate, so far so good Created a CSR:crypto pki create-csr certificate-name sw1113  ta-profile netwerk usage web subject common-name sw1113 key-size 2048 the rest of the info and extensions like CDP alternative names etc. is being pushed while signing in openssl via an extensions file resulting CSR processed with openssl (keeping it a simple 2048/sha1 leafcertificate) Signed this CSR with the afore mentioned and uploaded root certificate: Resulting PEM pasted to install the generated leaf certificate sw1113(config)# crypto pki install-signed-certificatePaste the certificate here and enter:-----BEGIN CERTIFICATE-----MIIEGjCCAwKgAwIBAgIBATANBgkqhkiG9w0BAQUFADCBlzELMAkGA1UEBhMCTkwx.....ASCspazUcVeCueTvvVLr4UPObJB1/IBHKHCwkN7nuaTHuiDD8tQzOlWaxry4MsEFGXojuFv1YtFAtlgLlwxvqndi2NysNyqcnZR1o4l0qe4eSrIlUrCyrvyieK5rdQ==-----END CERTIFICATE-----Certificate being installed is not signed by the TA certificate. So, what is going on? The leaf cert is definitely signed by the root cert that was uploaded as TA cert.    Would really appreciat... Read more

Read other answers
RELEVANCY SCORE 42

I have a problem with install multiple digital certificate (PKF format) to allow access to one website with different account ID.

Every time I installed the certificate, it is working and allow me access to the website with relevance ID. However, the installed certificate will be missing if I continue to install with another certificate. The way I install the certificate is just double click on the PKF certificate that provided by the website admin, then kept click on the next button until its finish the installation steps. All the certificates will install to "Personal" certificate store folder, but the problem is only one certificate will remain.

I ever try to import all the certificate with using windows certificate manager, is allow me to import all the certificates and able to let me access to the website with select different certificate to login with selected account ID. Anyway this method is only workable if the Internet Explorer is not close after install all the certificates, once the Internet Explorer is close, then all the certificates were gone.

The motioned problem PC is running on Windows XP SP3 with latest update. And the using internet explorer is version 8 with latest update as well.

I had try to reset the Internet Explorer to default, but is not working so, appreciate is anyone can guide me to solve this problem

A:PKF certificate missing after new certificate was installed

Under "Content" in Internet Options, are all your certificates there? Mine are. Either your Admin. or the issuer should have your answer. Some PKFs are not compatible with all OSs or Browsers. Try downloading certificates to Firefox or Chrome and see if that works.

Read other 2 answers
RELEVANCY SCORE 41.6

Option "Find Certificate" is missed when I try to edit certificate on another computer using mmc.Could you please let me know how can I solve that? I'm sure I'm admin on the remote machine.

Read other answers
RELEVANCY SCORE 36.8

Hiya

======
There is a flaw in the Winsock Proxy service in Microsoft Proxy
Server 2.0, and the Microsoft Firewall service in ISA Server 2000,
that would allow an attacker on the internal network to send a
specially crafted packet that would cause the server to stop
responding to internal and external requests. Receipt of such a
packet would cause CPU utilization on the server to reach 100%, and
thus make the server unresponsive. The Winsock Proxy service and
Microsoft Firewall service work with FTP, telnet, mail, news,
Internet Relay Chat (IRC), or other client applications that are
compatible with Windows Sockets (Winsock). These services allow
these applications to perform as if they were directly connected to
the Internet. These services redirect the necessary communications
functions to a Proxy Server 2.0 or ISA Server computer, thus
establishing a communication path from the internal application to
the Internet through it.
Maximum Severity Rating: Important
Affected Software:

Microsoft Proxy Server 2.0
Microsoft ISA Server
Download locations for this patch
Proxy Server 2.0:

http://microsoft.com/downloads/deta...B7-20FB-45EB-BAFD-031A0D2923E6&displaylang=en

ISA Server:

English:

http://microsoft.com/downloads/deta...D2-A888-4603-84B7-1053C8663436&displaylang=en

French:

http://microsoft.com/downloads/deta...D2-A888-4603-84B7-1053C8663436&displaylang=fr

German:

http://microsoft.com/downloads/deta...D2-A888-4603-84B7-1053C8663... Read more

Read other answers
RELEVANCY SCORE 35.2

Download Mz CPU Accelerator 4.1 Free - A small utility that will allow you to run applications much faster than the original speed - Softpedia

I was wondering if this is reliable and does not make programs crash. Any experience with this thing?

Martin

A:To be trusted?

Perhaps you should have a look at this one also.


Download More RAM!

Read other 9 answers
RELEVANCY SCORE 35.2

2nd post on this subject

I want to remove two computers from my trusted-PC list.In security info the only option I get is to remove all trusted-PC.If I use this option will I have to do trusted-PC again for each Computer I want ?

A:Trusted- PC

Hello Fred, and welcome to Eight Forums.

Unfortunately, Microsoft has changed it to only being able to remove all "trusted devices" now instead of being able to remove a specific "trusted PC" as before.

If you remove all trusted devices, you would then have to go through the process of having the other PCs added as trusted again.
Microsoft Account Trusted Devices - Add or Remove
Hope this helps,
Shawn

Read other 3 answers
RELEVANCY SCORE 35.2

I guess this is about hardware.

http://cgi.ebay.com/ws/eBayISAPI.dll?ViewItem&category=14294&item=4130120012&rd=1
 

A:Can this guy be trusted?

Read other 10 answers
RELEVANCY SCORE 34.8

I am running Windows 2003 Server, SP2.

IE7 will not hold trusted sites. After you add a site, click OK to get back out to the browser, and refresh (or even exit, and re-start IE), the desired site is no longer listed in Trusted Sites.

Internet Explorer enhanced security features are un-installed.

Suggestions?

Thanks!
--Mike
 

Read other answers
RELEVANCY SCORE 34.8

1. Using IE8 we are trying to connect to an ssl server. If the URL is not added manually in the trusted sites (Internet options -> security -> Trusted Sites) we are seeing a java exception. After manually adding the URL in trusted sites everything works fine.

Exception seen in java console is netscape.javascript.JSException: Access is denied.

In IE7 it works fine even if we donot manully add the URL in trusted site. Please let me know why we should add URL in the trusted sites manually for IE8.

2. Please let us know if there is any debugger tool available to debug XSS script errors occurred in IE8.

Thanks in advance.

A:IE8 Trusted sites

PHP Code:



deepthi_dl 
Registered User
 IE8 Trusted sites 

--------------------------------------------------------------------------------

1. Using IE8 we are trying to connect to an ssl server. If the URL is not added manually in the trusted sites (Internet options -> security -> Trusted Siteswe are seeing a java exceptionAfter manually adding the URL in trusted sites everything works fine

Exception seen in java console is netscapeRead more

Read other 1 answers
RELEVANCY SCORE 34.8

What happens in IE 11 when a site is added to "Trusted Sites?" The more technical the better. 
My problem is I have a site that does not rotate the image in IE11 but only when it is added as a trusted site. It works fine in IE8 without. The function attempting execute is rotateImage(ImgDiv)
Thank you. 

Read other answers
RELEVANCY SCORE 34.8

Where is the tab? Looking at the manual for v2.7.8 and there is a Trusted Vendors tab under WhiteList. Not seeing it there in v3.0.0.

Added a vendor to the Trusted Vendors to see if it would appear, it did not. Now I don't even know where the vendor I added has been stored.
 

A:NVT - Trusted Vendors?

after click Managed Trusted Vendors > right click Vendor list for options
 

Read other 0 answers
RELEVANCY SCORE 34.8

Hi guys,I have some how encountered the trusted antivirus malware as i assume. It creates pop ups and random things.I cant even see my hidden files that i hide. Please help. I have posted along with a HJT log.Logfile of Trend Micro HijackThis v2.0.2Scan saved at 1:16:52 PM, on 4/4/2008Platform: Windows XP SP2 (WinNT 5.01.2600)MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)Boot mode: NormalRunning processes:C:\WINDOWS\System32\smss.exeC:\WINDOWS\system32\winlogon.exeC:\WINDOWS\system32\services.exeC:\WINDOWS\system32\lsass.exeC:\WINDOWS\system32\Ati2evxx.exeC:\WINDOWS\system32\svchost.exeC:\WINDOWS\System32\svchost.exeC:\WINDOWS\system32\Ati2evxx.exeC:\WINDOWS\system32\spoolsv.exeC:\WINDOWS\Explorer.EXEC:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exeC:\WINDOWS\system32\ctfmon.exeC:\Program Files\Messenger\msmsgs.exeC:\Program Files\Analog Devices\SoundMAX\SMAgent.exeC:\WINDOWS\system32\svchost.exeC:\WINDOWS\system32\wscntfy.exeC:\Program Files\Internet Explorer\IEXPLORE.EXED:\Program Files\BitComet\BitComet.exeC:\Documents and Settings\Lalala\Desktop\HiJackThis\HiJackThis.exeR0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page ... Read more

A:Trusted Antivirus / Pop Ups

I see you are already receiving help here: http://www.geekstogo.com/forum/trusted-ant...amp;pid=1205787So this thread is closed.

Read other 1 answers
RELEVANCY SCORE 34.8

In My opinion Avast is most trusted and reliable! Share Your thoughts too!
 

A:Which is the Most Trusted AV Company?

Depend what is your view for "trusted". If we go like in here today's PARANOID internet world, ransom here ransom there and other thing messed with in...crap what i talking about, most privacy friendly for sure is Emsisoft. In other scenarios...hmm... i still keep my vote, Emsisoft.
 

Read other 43 answers