Vista - IE7 get message Certificate Error: Navigation Blocked

I am Authenticating Using WebAAA which allows me to bring up a web page,
login and get redirected to my internet home page or any page on the internet.
I bring up the Custom Web Page then I login. After login in it gives me the
Certificate Error: Navigation Blocked. Even after installing a certificate I
still get this page. I click continue to this website (not recommended) then
I get to my home page. How do I get past this window show it doesn't show up
everythime I logon using WebAAA Authentication. Any steps or help would be
greatly appreciated.
Thanks
Scott

> I am Authenticating Using WebAAA which allows me to bring up a web page,
> login and get redirected to my internet home page or any page on the internet.
> I bring up the Custom Web Page then I login. After login in it gives me the
> Certificate Error: Navigation Blocked. Even after installing a certificate I
> still get this page.


I'm not sure what WebAAA is, but you did you install the root certificate
that WebAAA is signed with? You need to launch IE elevated (right-click, Run
as administrator...).
1. Then navigate to the page that says it is blocked and continue on to the
page where you see the certificate.
2. Click the "certificate error" message in the address bar and click "View
certificate."
3. Click the Certification Path tab and select the highest cert in the list.
4. Click "View Certificate." This will bring up another dialog.
5. Click the "Install certificate" button

At this point you should no longer get the error. The problem may be that
you did not install the highest level certificate? All trust is based on the
root, so you must install that one. Installing the web server certificate is
not enough.

WebAAA is just a way off authenticating through a Web Page through your
switch or wireless switch solution. Colleges uses this and it will bring you
to a logon page where you will have to logon with your user credentials
before you get access to the internet. Once you logon you will get
redirected to a web page such as a college home page.
What I noticed is that I would click continue and I would see the
certificate error. But it would continue connecting to the web page and the
certificate error would be gone once the web page was brought up. So I had
to click the back arrow a few times just so I would be able to see the
certificate error while it was loading the web page just so I could click on
the certificate error and go through the steps to fix my issue.

My follow up question:
Is there a spot in Internet explorer where these errors are stored and I can
access the certificate error message in order to fix this issue without
having to click the back arrow in order to see the error and correct it as I
stated above.
"Jesper" wrote:

> > I am Authenticating Using WebAAA which allows me to bring up a web page,
> > login and get redirected to my internet home page or any page on the internet.
> > I bring up the Custom Web Page then I login. After login in it gives me the
> > Certificate Error: Navigation Blocked. Even after installing a certificate I
> > still get this page.
>
>
> I'm not sure what WebAAA is, but you did you install the root certificate
> that WebAAA is signed with? You need to launch IE elevated (right-click, Run
> as administrator...).
> 1. Then navigate to the page that says it is blocked and continue on to the
> page where you see the certificate.
> 2. Click the "certificate error" message in the address bar and click "View
> certificate."
> 3. Click the Certification Path tab and select the highest cert in the list.
> 4. Click "View Certificate." This will bring up another dialog.
> 5. Click the "Install certificate" button
>
> At this point you should no longer get the error. The problem may be that
> you did not install the highest level certificate? All trust is based on the
> root, so you must install that one. Installing the web server certificate is
> not enough.

> What I noticed is that I would click continue and I would see the
> certificate error. But it would continue connecting to the web page and the
> certificate error would be gone once the web page was brought up.

So you did get it fixed then?

> My follow up question:
> Is there a spot in Internet explorer where these errors are stored and I can
> access the certificate error message in order to fix this issue without
> having to click the back arrow in order to see the error and correct it as I
> stated above.

I do not believe so. Pages that do redirects from secure web sites to
insecure ones are very problematic this way because they hide the message
from you and make it difficult to fix. To make matters worse, far too many of
them only use HTTPS for the form submission, so you don't see the certificate
on the login screen either. This is a terrible idea because it means that the
user has no way to verify where the password is being sent before actually
sending it. Many sites use that as an optimization technique though.

Thanks for your help I was able to get it work. The only thing my view was
grayed out so I just selected install certificates.

"Jesper" wrote:

> > What I noticed is that I would click continue and I would see the
> > certificate error. But it would continue connecting to the web page and the
> > certificate error would be gone once the web page was brought up.
>
> So you did get it fixed then?
>
> > My follow up question:
> > Is there a spot in Internet explorer where these errors are stored and I can
> > access the certificate error message in order to fix this issue without
> > having to click the back arrow in order to see the error and correct it as I
> > stated above.
>
> I do not believe so. Pages that do redirects from secure web sites to
> insecure ones are very problematic this way because they hide the message
> from you and make it difficult to fix. To make matters worse, far too many of
> them only use HTTPS for the form submission, so you don't see the certificate
> on the login screen either. This is a terrible idea because it means that the
> user has no way to verify where the password is being sent before actually
> sending it. Many sites use that as an optimization technique though.