Home | Site Map | Cisco How ToNet How To | Wireless |Search | Forums | Services | Donations | Careers | About Us | Contact Us|

imported certificate to Vista doesn't work

Permissions, Group Policy, IPSec, Virus, Spam, Spyware, Malware.

imported certificate to Vista doesn't work

Postby guest » Mon Mar 23, 2009 3:29 pm

Problem Description:
-----------------------------
There is a web server certificate, you can import to Vista but it doesn't
work, however it works in XP

Causes:
-----------------------------
The current user does not have Read permissions for the following registry
subkey:
HKEY_CURRENT_USER\Software\Microsoft\SystemCertificates\Root\ProtectedRoots

Even though you run as Administrator, if Administrator doesn't have Read
permission of above key, it still cannot view the certificate.

Resolution:
-----------------------------
1. Assign Read permissions for the ProtectedRoots registry key to the user
who is currently logged on to the computer.
1) Run regedit

2)
HKEY_CURRENT_USER\Software\Microsoft\SystemCertificates\Root\ProtectedRoots

3) Right click it, and choose Permission

4) If the user who is currently logged on to the computer is listed in the
Group or user names box, click the user's name, click to select the Read
check box in the Allow column, and then click OK.

5) If the user who is currently logged on to the computer is not listed in
the Group or user names box, follow these steps:
a.Click Add.
b.Type the name of the user who is currently logged on to the computer, and
then click OK.
c.In the Group or user names box, select the user name, click to select the
Read check box in the Allow column, and then click OK.

Note:
If a domain user is logged on by using cached credentials and is not
connected to the domain, the domain user will be unable to add permissions
for their domain user account to the registry key in these steps. You must
log on to the local computer and add the local user's account to the
permissions for the registry key. You can then successfully install the
certificate.

2. There is a known issue which is similar to your symptom, you can apply
the hotfix in KB 932156.
You cannot view certificate information in Windows Internet Explorer 7 or in
Certificate Manager after you successfully import a certificate on a Windows
Vista-based computer
http://support.microsoft.com/kb/932156

1) Install update of Vista:
If you cannot install it, please uninstall Vista SP1 first, apply this
update, and then upgrade to SP1.
http://support.microsoft.com/kb/948537
2) After you apply the update to the computer, locate the Portreg.exe file
in the following path:
<drive>:\Program Files\Microsoft Corporation\Microsoft Update ProtectedRoots
registry key tool (KB932156)
3) Double-click the Portreg.exe file

3. If this cannot resolve your issue, please enable built-in Admin account
and use it to import certificate.
1) Computer -> Management -> Local Users and Groups -> Users
2) Double click Administrator, uncheck "Account is disabled", click OK
3) Right click Administrator, set Password
4) Logon with Administrator and import the certificate again.
Tablet and Smartphone Setup Guide
http://www.quicksetupguide.com

Troubleshooting Vista Wireless
http://chicagotech.net/
guest
 
Posts: 9027
Joined: Mon Nov 27, 2006 1:10 pm

Return to Security

Your Ad Here

Who is online

Users browsing this forum: No registered users and 2 guests