Well, you didn't really explain what the browser does when it "doesn't work" but I've heard (and experienced) some issues with corrupt (or invalid) certificates causing IE to just return a "page not found" error, specifically I experienced it on a Netscreen firewall interface using IE6. We ended up having to wipe it and load an earlier version of the firmware for compliance reasons, and it didn't happen again after that so I'm not quite sure what the problem/fix was.
Sorry I couldn't be of more help, I'm not very knowledgeable in the whole certificate authority arena either, but thought I'd throw in my experience. cb -----Original Message----- From: Mayo, Bill [mailto:[EMAIL PROTECTED] Sent: Wednesday, January 02, 2008 3:55 PM To: NT System Admin Issues Subject: Certificate Problem with IE We have a vendor that changed their certificate over the weekend and now have mixed issues with our staff accessing the site. Connecting to the site with a Windows 2000 machine or a browser other than IE (in XP or other) will cause a message come up asking if you want to trust the certificate. On XP, there is no such prompting, but it works for some people and not for others. It looks like the certificate is automatically being trusted or declined for XP staff, but we can't figure out why it works for some, but not others. From what we can see, it is user-specific--it works for one user on a computer, but not another. The local permissions don't seem to be an issue (we made one of the users an administrator temporarily with no joy). If you connect to the site in Firefox, it explicitly states that it is unable to verify the certificate. I have attempted exporting the certificate from a working connection and importing it as a trusted site for a non-working user with no success (I will admit that I just barely know what I am doing in that regard). Googling hasn't turned up anything to this point that was helpful. Does anyone have any idea what might cause that behavior and what might be done to correct it? Bill Mayo Pitt County MIS ~ Upgrade to Next Generation Antispam/Antivirus with Ninja! ~ ~ <http://www.sunbelt-software.com/SunbeltMessagingNinja.cfm> ~ ~ Upgrade to Next Generation Antispam/Antivirus with Ninja! ~ ~ <http://www.sunbelt-software.com/SunbeltMessagingNinja.cfm> ~
