Windows Vista Forums
Vista Forums Home Join Vista Forums Donate Vista Tutorials Tags

Welcome to Vista Forums we are your forum to discuss Windows Vista x64 and x86 systems. Whether you need help or just want to post an idea you have on Vista, this is the forum for you.
Register at Vista forums...the world biggest Windows Vista resource Join Vista Forums Now

Go Back   Vista Forums > Vista Newsgroups > Vista security

Trusted CA dissapearing from certificate store

Update your Vista Drivers Update Your Drivers Now!!
Closed Thread
 
Thread Tools Display Modes
Old 12-20-2006   #1 (permalink)
Lithium
Guest


 

Trusted CA dissapearing from certificate store

I have a problem in that regularly (several times per day), i have to
re-import my CA certificate into the trusted CAs certificate store. For some
reason, it keeps disapearing, and applictions don't recognised certifictes
signed by the CA as being trusted.

Any ideas?

My System SpecsSystem Spec
Old 12-21-2006   #2 (permalink)
Carsten Kinder [MSFT]
Guest


 

Re: Trusted CA dissapearing from certificate store

>I have a problem in that regularly (several times per day), i have to
> re-import my CA certificate into the trusted CAs certificate store. For
> some
> reason, it keeps disapearing, and applictions don't recognised certifictes
> signed by the CA as being trusted.
>

Is that a domain joined computer? If yes, may be the domain administrator
has set the option "To perform certificate-based authentication of users and
computers, CAs must meet the following criteria: Registered in Active
Directory only" in the "Trusted Root Certification Authorities Properties".
For related information, see Figure 4 in
http://www.microsoft.com/technet/pro...t/tshtcrl.mspx.

--
Carsten Kinder
Microsoft Services

This posting is provided "AS IS" with no warranties, and confers no rights.

My System SpecsSystem Spec
Old 12-21-2006   #3 (permalink)
Lithium
Guest


 

Re: Trusted CA dissapearing from certificate store

Hi Carsten,

No its not joined to the domain. Its a standalone machine. Fresh install, I
have literally only installed Office 2007 and MS Foldershare. It only happens
on one of my 3 PCs, each of them has pretty much the same configuration.

Ryan

"Carsten Kinder [MSFT]" wrote:

> >I have a problem in that regularly (several times per day), i have to
> > re-import my CA certificate into the trusted CAs certificate store. For
> > some
> > reason, it keeps disapearing, and applictions don't recognised certifictes
> > signed by the CA as being trusted.
> >

> Is that a domain joined computer? If yes, may be the domain administrator
> has set the option "To perform certificate-based authentication of users and
> computers, CAs must meet the following criteria: Registered in Active
> Directory only" in the "Trusted Root Certification Authorities Properties".
> For related information, see Figure 4 in
> http://www.microsoft.com/technet/pro...t/tshtcrl.mspx.
>
> --
> Carsten Kinder
> Microsoft Services
>
> This posting is provided "AS IS" with no warranties, and confers no rights.
>

My System SpecsSystem Spec
Old 12-21-2006   #4 (permalink)
Carsten Kinder [MSFT]
Guest


 

Re: Trusted CA dissapearing from certificate store

> No its not joined to the domain. Its a standalone machine. Fresh install,
> I
> have literally only installed Office 2007 and MS Foldershare. It only
> happens
> on one of my 3 PCs, each of them has pretty much the same configuration.
>

That's curious! Could you please verify if those root CA certificates reside
in the computer's or user's certificate store?
To do so, open the Certificates MMC snap-in (certmgr.msc), select the
"Certificates - Current User" in the left pane. In the "View" menu, go to
"Options" and select "Physical certificate stores". In the left pane, expand
"Trusted Root Certification Authorities" and see where the root CA
certificates reside. They should be under "Local Computer - Certificates".
If the certificates are not in this container, put them there. The
"Registry" container would hold the certificates that are trusted by the
current user only. Root CA certificates should always be stored in the
computer store.

--
Carsten Kinder
Microsoft Services

This posting is provided "AS IS" with no warranties, and confers no rights.

My System SpecsSystem Spec
Old 12-21-2006   #5 (permalink)
Lithium
Guest


 

Re: Trusted CA dissapearing from certificate store

Hi Carsten,

The certs were in my user store, I have moved them to the local computer
store to see if they behave themselves there. I am the only user of the 3
PCs, so having the certs loaded in the user store isn't really an issue for
me. I would expect them to stay put even in my user store.

Ryan

"Carsten Kinder [MSFT]" wrote:

> > No its not joined to the domain. Its a standalone machine. Fresh install,
> > I
> > have literally only installed Office 2007 and MS Foldershare. It only
> > happens
> > on one of my 3 PCs, each of them has pretty much the same configuration.
> >

> That's curious! Could you please verify if those root CA certificates reside
> in the computer's or user's certificate store?
> To do so, open the Certificates MMC snap-in (certmgr.msc), select the
> "Certificates - Current User" in the left pane. In the "View" menu, go to
> "Options" and select "Physical certificate stores". In the left pane, expand
> "Trusted Root Certification Authorities" and see where the root CA
> certificates reside. They should be under "Local Computer - Certificates".
> If the certificates are not in this container, put them there. The
> "Registry" container would hold the certificates that are trusted by the
> current user only. Root CA certificates should always be stored in the
> computer store.
>
> --
> Carsten Kinder
> Microsoft Services
>
> This posting is provided "AS IS" with no warranties, and confers no rights.
>

My System SpecsSystem Spec
Closed Thread

Thread Tools
Display Modes



Similar Threads
Thread Thread Starter Forum Replies Last Post
mailto not trusted even when click from trusted site with IE7 & Vi Eric Vista mail 11 06-03-2008 01:01 PM
dissapearing messages ken Vista mail 1 12-13-2007 08:46 AM
Dissapearing text JHouston Vista General 5 08-18-2007 09:20 AM
Adding certificate to trusted root authority Fahd Ajmal Vista security 1 05-12-2007 08:41 AM
mailto not trusted even when click from trusted site with IE7 & Vi Eric Vista General 7 05-05-2007 12:27 PM


Vistax64.com is an independent web site and has not been authorized,
sponsored, or otherwise approved by Microsoft Corporation.
"Windows Vista", the Start Orb, and related materials are trademarks of Microsoft Corp.
© Designer Media 2005-2008

1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51