When you browse to a secure Web site, you may receive the following message:
This security certificate was issued by a company that you have not chosen to trust
Back to the topCAUSE
The root certificate of the Certificate Authority (CA) that issued the Web site’…
The root certificate of the Certificate Authority (CA) that issued the Web site’s certificate is not in the client browser’s Trusted Root Certification Authority store. The message does not affect the establishment of a Secure Sockets Layer (SSL) session between the client and the server.
RESOLUTION
The steps below are used to install the root certificate into the client’s brows…
The steps below are used to install the root certificate into the client’s browser. This eliminates the security message the next time you visit the site. Note that these steps will only work for Microsoft Internet Explorer browsers.
NOTE: The requirement to install the Certificate Authority Certificate only exists with non-trusted CAs, such as Microsoft Certificate Server.
- During the default installation of Certificate Server, a shared folder is generated to store the root certificate file. The default location of this folder is C:Certconfig. In this folder, locate the root certificate file. The default naming standard is as follows: servername.domain.com_name_of_certificate_server.crt
If you cannot find the root certificate file, search your hard drives for all files that end in .crt. Double-click each .crt file that is returned in the search and view its details to confirm that its serial number is the same as the serial number of the root certificate that issued your Web server certificate.
To view the serial number of your Web site’s root certificate, securely browse to your Web site (that is, use the https:// protocol) and double-click the padlock icon in the lower right corner of your browser. Click the Certification Path tab and double-click the top certificate. The serial number of this certificate should match the root certificate that your search returned.
- In Windows Explorer, double-click the root certificate file.
- Click the Details tab and select Copy to file to start the Certificate Manager Export Wizard.
- On the second screen of the wizard select Base64, and on the third screen provide a path and file name for the certificate.NOTE: This is the file that you use in the sample ASP code that is provided in this article.
- Click Next and then click Finish.
<HTML>
<HEAD>
<TITLE>Installing A Root Certificate</TITLE>
<BR>Root Certificate Authority Installation
<BR>
<BR>
<%@ LANGUAGE="VBScript"%>
<%
Set fs = CreateObject("Scripting.FileSystemObject")
Set MyFile = fs.OpenTextFile("c:certificatesbase64.cer", 1)
Output = ""
Do While MyFile.AtEndOfStream <> true
line = Chr(34) & MyFile.ReadLine & Chr(34)
If MyFile.AtEndOfStream <> true then
line = line & " & _" & Chr(10)
End If
Output = Output & line
Loop
MyFile.Close
Set MyFile = Nothing
Set fs = Nothing
%>
<SCRIPT language="VBSCRIPT">
on error resume next
Dim Str, CEnroll
Set CEnroll = CreateObject("CEnroll.CEnroll.1")
Str = <% Response.Write Output %>
CEnroll.installPKCS7(Str)
Set CEnroll = Nothing
</SCRIPT>
</HEAD>
</HTML>
For additional information, click the article numbers below to view the articles in the Microsoft Knowledge Base:
290625 (http://support.microsoft.com/kb/290625/EN-US/ ) HOWTO: IIS5: How to Configure SSL in a Windows 2000 IIS 5 Test Environment Using Certificate Server 2.0
265847 (http://support.microsoft.com/kb/265847/EN-US/ ) Error Message: The Page Cannot Be Displayed . . . Cannot Find Server or DNS Error
APPLIES TO
- Microsoft Internet Explorer 5.5 Service Pack 1
- Microsoft Internet Explorer 5.01
- Microsoft Internet Explorer 5.01
- Microsoft Internet Explorer 5.0
- Microsoft Internet Explorer 4.01 Service Pack 1
- Microsoft Internet Explorer 4.01 Service Pack 2
- Microsoft Internet Explorer 4.0 128-Bit Edition
- Microsoft Internet Explorer 5.5 Service Pack 1
- Microsoft Internet Explorer 5.01
- Microsoft Internet Explorer 5.01
- Microsoft Internet Explorer 5.0
- Microsoft Internet Information Server 4.0
- Microsoft Internet Information Services 5.0
- Microsoft Internet Information Services 6.0
- Microsoft Internet Information Services 7.0
Source: Error Message: This Security Certificate Was Issued by a Company that You Have Not Chosen to Trust
One thought on “Error Message: This Security Certificate Was Issued by a Company that You Have Not Chosen to Trust”
I’ll right away take hold of your rss as I can not in finding your email subscription hyperlink or e-newsletter service. Do you have any? Please allow me recognize in order that I may subscribe. Thanks.