Trusted CA dissapearing from certificate store

I have a problem in that regularly (several times per day), i have to
re-import my CA certificate into the trusted CAs certificate store. For some
reason, it keeps disapearing, and applictions don't recognised certifictes
signed by the CA as being trusted.

Any ideas?

>I have a problem in that regularly (several times per day), i have to
> re-import my CA certificate into the trusted CAs certificate store. For
> some
> reason, it keeps disapearing, and applictions don't recognised certifictes
> signed by the CA as being trusted.
>
Is that a domain joined computer? If yes, may be the domain administrator
has set the option "To perform certificate-based authentication of users and
computers, CAs must meet the following criteria: Registered in Active
Directory only" in the "Trusted Root Certification Authorities Properties".
For related information, see Figure 4 in
http://www.microsoft.com/technet/pro...t/tshtcrl.mspx.

--
Carsten Kinder
Microsoft Services

This posting is provided "AS IS" with no warranties, and confers no rights.

Hi Carsten,

No its not joined to the domain. Its a standalone machine. Fresh install, I
have literally only installed Office 2007 and MS Foldershare. It only happens
on one of my 3 PCs, each of them has pretty much the same configuration.

Ryan

"Carsten Kinder [MSFT]" wrote:

> >I have a problem in that regularly (several times per day), i have to
> > re-import my CA certificate into the trusted CAs certificate store. For
> > some
> > reason, it keeps disapearing, and applictions don't recognised certifictes
> > signed by the CA as being trusted.
> >
> Is that a domain joined computer? If yes, may be the domain administrator
> has set the option "To perform certificate-based authentication of users and
> computers, CAs must meet the following criteria: Registered in Active
> Directory only" in the "Trusted Root Certification Authorities Properties".
> For related information, see Figure 4 in
> http://www.microsoft.com/technet/pro...t/tshtcrl.mspx.
>
> --
> Carsten Kinder
> Microsoft Services
>
> This posting is provided "AS IS" with no warranties, and confers no rights.
>

> No its not joined to the domain. Its a standalone machine. Fresh install,
> I
> have literally only installed Office 2007 and MS Foldershare. It only
> happens
> on one of my 3 PCs, each of them has pretty much the same configuration.
>
That's curious! Could you please verify if those root CA certificates reside
in the computer's or user's certificate store?
To do so, open the Certificates MMC snap-in (certmgr.msc), select the
"Certificates - Current User" in the left pane. In the "View" menu, go to
"Options" and select "Physical certificate stores". In the left pane, expand
"Trusted Root Certification Authorities" and see where the root CA
certificates reside. They should be under "Local Computer - Certificates".
If the certificates are not in this container, put them there. The
"Registry" container would hold the certificates that are trusted by the
current user only. Root CA certificates should always be stored in the
computer store.

--
Carsten Kinder
Microsoft Services

This posting is provided "AS IS" with no warranties, and confers no rights.

Hi Carsten,

The certs were in my user store, I have moved them to the local computer
store to see if they behave themselves there. I am the only user of the 3
PCs, so having the certs loaded in the user store isn't really an issue for
me. I would expect them to stay put even in my user store.

Ryan

"Carsten Kinder [MSFT]" wrote:

> > No its not joined to the domain. Its a standalone machine. Fresh install,
> > I
> > have literally only installed Office 2007 and MS Foldershare. It only
> > happens
> > on one of my 3 PCs, each of them has pretty much the same configuration.
> >
> That's curious! Could you please verify if those root CA certificates reside
> in the computer's or user's certificate store?
> To do so, open the Certificates MMC snap-in (certmgr.msc), select the
> "Certificates - Current User" in the left pane. In the "View" menu, go to
> "Options" and select "Physical certificate stores". In the left pane, expand
> "Trusted Root Certification Authorities" and see where the root CA
> certificates reside. They should be under "Local Computer - Certificates".
> If the certificates are not in this container, put them there. The
> "Registry" container would hold the certificates that are trusted by the
> current user only. Root CA certificates should always be stored in the
> computer store.
>
> --
> Carsten Kinder
> Microsoft Services
>
> This posting is provided "AS IS" with no warranties, and confers no rights.
>