Windows Vista Forums
Vista Forums Home Join Vista Forums Windows 7 Forum Vista Tutorials Tags
Welcome to Windows Vista Forums. Our forum is dedicated to helping you find solutions with any problems, errors or issues you are experiencing with Windows Vista. The Vista forum also covers news and updates and has an extensive Windows Vista tutorial section that covers a wide range of tips and tricks.

Go Back   Vista Forums > Vista Newsgroups > Vista security

Vista - Trusted CA dissapearing from certificate store

Reply
 
Old 12-20-2006   #1 (permalink)
Lithium


 
 

Trusted CA dissapearing from certificate store

I have a problem in that regularly (several times per day), i have to
re-import my CA certificate into the trusted CAs certificate store. For some
reason, it keeps disapearing, and applictions don't recognised certifictes
signed by the CA as being trusted.

Any ideas?

My System SpecsSystem Spec
Old 12-21-2006   #2 (permalink)
Carsten Kinder [MSFT]


 
 

Re: Trusted CA dissapearing from certificate store

>I have a problem in that regularly (several times per day), i have to
> re-import my CA certificate into the trusted CAs certificate store. For
> some
> reason, it keeps disapearing, and applictions don't recognised certifictes
> signed by the CA as being trusted.
>

Is that a domain joined computer? If yes, may be the domain administrator
has set the option "To perform certificate-based authentication of users and
computers, CAs must meet the following criteria: Registered in Active
Directory only" in the "Trusted Root Certification Authorities Properties".
For related information, see Figure 4 in
http://www.microsoft.com/technet/pro...t/tshtcrl.mspx.

--
Carsten Kinder
Microsoft Services

This posting is provided "AS IS" with no warranties, and confers no rights.

My System SpecsSystem Spec
Old 12-21-2006   #3 (permalink)
Lithium


 
 

Re: Trusted CA dissapearing from certificate store

Hi Carsten,

No its not joined to the domain. Its a standalone machine. Fresh install, I
have literally only installed Office 2007 and MS Foldershare. It only happens
on one of my 3 PCs, each of them has pretty much the same configuration.

Ryan

"Carsten Kinder [MSFT]" wrote:

> >I have a problem in that regularly (several times per day), i have to
> > re-import my CA certificate into the trusted CAs certificate store. For
> > some
> > reason, it keeps disapearing, and applictions don't recognised certifictes
> > signed by the CA as being trusted.
> >

> Is that a domain joined computer? If yes, may be the domain administrator
> has set the option "To perform certificate-based authentication of users and
> computers, CAs must meet the following criteria: Registered in Active
> Directory only" in the "Trusted Root Certification Authorities Properties".
> For related information, see Figure 4 in
> http://www.microsoft.com/technet/pro...t/tshtcrl.mspx.
>
> --
> Carsten Kinder
> Microsoft Services
>
> This posting is provided "AS IS" with no warranties, and confers no rights.
>

My System SpecsSystem Spec
Old 12-21-2006   #4 (permalink)
Carsten Kinder [MSFT]


 
 

Re: Trusted CA dissapearing from certificate store

> No its not joined to the domain. Its a standalone machine. Fresh install,
> I
> have literally only installed Office 2007 and MS Foldershare. It only
> happens
> on one of my 3 PCs, each of them has pretty much the same configuration.
>

That's curious! Could you please verify if those root CA certificates reside
in the computer's or user's certificate store?
To do so, open the Certificates MMC snap-in (certmgr.msc), select the
"Certificates - Current User" in the left pane. In the "View" menu, go to
"Options" and select "Physical certificate stores". In the left pane, expand
"Trusted Root Certification Authorities" and see where the root CA
certificates reside. They should be under "Local Computer - Certificates".
If the certificates are not in this container, put them there. The
"Registry" container would hold the certificates that are trusted by the
current user only. Root CA certificates should always be stored in the
computer store.

--
Carsten Kinder
Microsoft Services

This posting is provided "AS IS" with no warranties, and confers no rights.

My System SpecsSystem Spec
Old 12-21-2006   #5 (permalink)
Lithium


 
 

Re: Trusted CA dissapearing from certificate store

Hi Carsten,

The certs were in my user store, I have moved them to the local computer
store to see if they behave themselves there. I am the only user of the 3
PCs, so having the certs loaded in the user store isn't really an issue for
me. I would expect them to stay put even in my user store.

Ryan

"Carsten Kinder [MSFT]" wrote:

> > No its not joined to the domain. Its a standalone machine. Fresh install,
> > I
> > have literally only installed Office 2007 and MS Foldershare. It only
> > happens
> > on one of my 3 PCs, each of them has pretty much the same configuration.
> >

> That's curious! Could you please verify if those root CA certificates reside
> in the computer's or user's certificate store?
> To do so, open the Certificates MMC snap-in (certmgr.msc), select the
> "Certificates - Current User" in the left pane. In the "View" menu, go to
> "Options" and select "Physical certificate stores". In the left pane, expand
> "Trusted Root Certification Authorities" and see where the root CA
> certificates reside. They should be under "Local Computer - Certificates".
> If the certificates are not in this container, put them there. The
> "Registry" container would hold the certificates that are trusted by the
> current user only. Root CA certificates should always be stored in the
> computer store.
>
> --
> Carsten Kinder
> Microsoft Services
>
> This posting is provided "AS IS" with no warranties, and confers no rights.
>

My System SpecsSystem Spec
Reply

Thread Tools


Similar Threads
Thread Forum
self created root certificate still not trusted PowerShell
mailto not trusted even when click from trusted site with IE7 & Vi Vista mail
dissapearing files Vista file management
Adding certificate to trusted root authority Vista security
mailto not trusted even when click from trusted site with IE7 & Vi Vista General


Vista Forums is an independent web site and has not been authorized,
sponsored, or otherwise approved by Microsoft Corporation.
"Windows Vista", the Start Orb, and related materials are trademarks of Microsoft Corp.
© Designer Media Ltd

1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46