Vista - Help on installing Certificates in Vista IE7

Our mail server requires a certificate to be installed in order to access
the mail through the web. When I pull up the address it ask if I want to
continue to the site. I say yes. Then it flashes red at the top and shows
the word CERTIFICATE in red. I click on it and click VIEW but it doesnt give
me the option to install it.

I then put the website in the Trusted Domains group under the Security Tab
of IE7. I went back to the site and it would allow me to install the
certificate now. However each time I go back to the website it still acts
like no certificate was installed.

How do I install certificates so they will actually take affect and stay?

> Our mail server requires a certificate to be installed in order to access
> the mail through the web. When I pull up the address it ask if I want to
> continue to the site. I say yes. Then it flashes red at the top and shows
> the word CERTIFICATE in red. I click on it and click VIEW but it doesnt give
> me the option to install it.

In order to install certificates using IE 7 on Vista you must run IE with
Protected Mode off. The easiest way to do that is to elevate IE. Right-click
the Internet Explorer icon and select Run as administrator... Then navigate
to the site and open the cert they way you did before. Now the option to
install the cert is enabled.

---
Your question may already be answered in Windows Vista Security:
http://www.amazon.com/gp/product/047...otectyourwi-20

"Jesper" <Jesper@discussions.microsoft.com> wrote in message
news:5F812AB7-745C-44CD-91F3-040E0E0FC343@microsoft.com...
>> Our mail server requires a certificate to be installed in order to access
>> the mail through the web. When I pull up the address it ask if I want to
>> continue to the site. I say yes. Then it flashes red at the top and shows
>> the word CERTIFICATE in red. I click on it and click VIEW but it doesnt
>> give
>> me the option to install it.
>
> In order to install certificates using IE 7 on Vista you must run IE with
> Protected Mode off. The easiest way to do that is to elevate IE.
> Right-click
> the Internet Explorer icon and select Run as administrator... Then
> navigate
> to the site and open the cert they way you did before. Now the option to
> install the cert is enabled.


What if you're not an administrator?

Do you have to get an administrator to type in his password to get the
certificate installed on your machine?

Can you not simply download the certificate as a CER file, and then install
it manually?

Alun.
~~~~
--
Texas Imperial Software | Web: http://www.wftpd.com/
23921 57th Ave SE | Blog: http://msmvps.com/alunj/
Woodinville WA 98072-8661 | WFTPD, WFTPD Pro are Windows FTP servers.
Fax/Voice +1(425)807-1787 | Try our NEW client software, WFTPD Explorer.

> What if you're not an administrator?
>
> Do you have to get an administrator to type in his password to get the
> certificate installed on your machine?

Uhm, yes. Installing new root certificates that are trusted by man and beast
(and kernels) alike is a decidedly administrative operation - not to be
trusted to the untrustworthy.

"Jesper" <Jesper@discussions.microsoft.com> wrote in message
news:81827557-2E5C-45A2-A144-00E4EED9053F@microsoft.com...
>> What if you're not an administrator?
>>
>> Do you have to get an administrator to type in his password to get the
>> certificate installed on your machine?
>
> Uhm, yes. Installing new root certificates that are trusted by man and
> beast
> (and kernels) alike is a decidedly administrative operation - not to be
> trusted to the untrustworthy.


Sorry - thought it might be a user certificate.

For deploying trusted root certificates throughout a domain, the page at
http://technet2.microsoft.com/Window...cdd691033.mspx
should help.

Don't forget to set a reminder to edit the GPO before the certificate
expires!

Alun.
~~~~
--
Texas Imperial Software | Web: http://www.wftpd.com/
23921 57th Ave SE | Blog: http://msmvps.com/alunj/
Woodinville WA 98072-8661 | WFTPD, WFTPD Pro are Windows FTP servers.
Fax/Voice +1(425)807-1787 | Try our NEW client software, WFTPD Explorer.

I hate microsoft sometimes. LOL Thanks for the info. I will try it.

<alun@texis.invalid> wrote in message
news:29CC3617-8077-4047-83D5-65C4276429CA@microsoft.com...
> "Jesper" <Jesper@discussions.microsoft.com> wrote in message
> news:81827557-2E5C-45A2-A144-00E4EED9053F@microsoft.com...
>>> What if you're not an administrator?
>>>
>>> Do you have to get an administrator to type in his password to get the
>>> certificate installed on your machine?
>>
>> Uhm, yes. Installing new root certificates that are trusted by man and
>> beast
>> (and kernels) alike is a decidedly administrative operation - not to be
>> trusted to the untrustworthy.
>
>
> Sorry - thought it might be a user certificate.
>
> For deploying trusted root certificates throughout a domain, the page at
> http://technet2.microsoft.com/Window...cdd691033.mspx
> should help.
>
> Don't forget to set a reminder to edit the GPO before the certificate
> expires!
>
> Alun.
> ~~~~
> --
> Texas Imperial Software | Web: http://www.wftpd.com/
> 23921 57th Ave SE | Blog: http://msmvps.com/alunj/
> Woodinville WA 98072-8661 | WFTPD, WFTPD Pro are Windows FTP servers.
> Fax/Voice +1(425)807-1787 | Try our NEW client software, WFTPD Explorer.
>
>

Ok I went into IE 7 and turned off the Protected Mode. Went and installed
the certificate and it says Certificate Installed Succesful.

However when I exit IE7 and go back into the same web page it still ask for
the certificate. What do I do now?

"Chris Peikert" <c.peikert@co.matagorda.tx.us> wrote in message
news:ES7Qh.1010$zC.714@newssvr22.news.prodigy.net...
>I hate microsoft sometimes. LOL Thanks for the info. I will try it.
>
> <alun@texis.invalid> wrote in message
> news:29CC3617-8077-4047-83D5-65C4276429CA@microsoft.com...
>> "Jesper" <Jesper@discussions.microsoft.com> wrote in message
>> news:81827557-2E5C-45A2-A144-00E4EED9053F@microsoft.com...
>>>> What if you're not an administrator?
>>>>
>>>> Do you have to get an administrator to type in his password to get the
>>>> certificate installed on your machine?
>>>
>>> Uhm, yes. Installing new root certificates that are trusted by man and
>>> beast
>>> (and kernels) alike is a decidedly administrative operation - not to be
>>> trusted to the untrustworthy.
>>
>>
>> Sorry - thought it might be a user certificate.
>>
>> For deploying trusted root certificates throughout a domain, the page at
>> http://technet2.microsoft.com/Window...cdd691033.mspx
>> should help.
>>
>> Don't forget to set a reminder to edit the GPO before the certificate
>> expires!
>>
>> Alun.
>> ~~~~
>> --
>> Texas Imperial Software | Web: http://www.wftpd.com/
>> 23921 57th Ave SE | Blog: http://msmvps.com/alunj/
>> Woodinville WA 98072-8661 | WFTPD, WFTPD Pro are Windows FTP servers.
>> Fax/Voice +1(425)807-1787 | Try our NEW client software, WFTPD Explorer.
>>
>>
>
>

On Tue, 03 Apr 2007 18:44:21 GMT, Chris Peikert wrote:

> Ok I went into IE 7 and turned off the Protected Mode. Went and installed
> the certificate and it says Certificate Installed Succesful.
>
> However when I exit IE7 and go back into the same web page it still ask for
> the certificate. What do I do now?

Chances are good that this really has nothing to do with Protected Mode. It
is more likely that the certificate you're installing is actually an
intermediate certificate rather than a root certificate, which is what you
need to install in order to get rid of the error message. What is the URL
of the site in question?

--
Paul Adare
MVP - Windows - Virtual Machine
http://www.identit.ca
"The English language, complete with irony, satire, and sarcasm, has
survived for centuries without smileys. Only the new crop of modern
computer geeks finds it impossible to detect a joke that is not clearly
labeled as such."
Ray Shea

It shows the certificate under both Intermediate and Root. Now what do we
do?

"Paul Adare" <pkadare@gmail.com> wrote in message
news:953knsen8rg9.xs4p97b5o2wa$.dlg@40tude.net...
> On Tue, 03 Apr 2007 18:44:21 GMT, Chris Peikert wrote:
>
>> Ok I went into IE 7 and turned off the Protected Mode. Went and installed
>> the certificate and it says Certificate Installed Succesful.
>>
>> However when I exit IE7 and go back into the same web page it still ask
>> for
>> the certificate. What do I do now?
>
> Chances are good that this really has nothing to do with Protected Mode.
> It
> is more likely that the certificate you're installing is actually an
> intermediate certificate rather than a root certificate, which is what you
> need to install in order to get rid of the error message. What is the URL
> of the site in question?
>
> --
> Paul Adare
> MVP - Windows - Virtual Machine
> http://www.identit.ca
> "The English language, complete with irony, satire, and sarcasm, has
> survived for centuries without smileys. Only the new crop of modern
> computer geeks finds it impossible to detect a joke that is not clearly
> labeled as such."
> Ray Shea

On Wed, 04 Apr 2007 16:08:16 GMT, Chris Peikert wrote:

> It shows the certificate under both Intermediate and Root. Now what do we
> do?

Without the URL so I can look at the certificate there's not much more I
can do for you.

--
Paul Adare
MVP - Windows - Virtual Machine
http://www.identit.ca
"The English language, complete with irony, satire, and sarcasm, has
survived for centuries without smileys. Only the new crop of modern
computer geeks finds it impossible to detect a joke that is not clearly
labeled as such."
Ray Shea