I have re-attempted to export the certificate chain and have someone
working on installing it on an affected workstation (still awaiting the
result).  I do note, however, that the Windows 2000 machines actually
work; it is the XP machines that have problems.  Further, the same XP
machine will work for one user, but not another.  I understand that
there are personally approved sites, but I don't see where it is
presently showing that way.

I will advise of the results of the test, but am interested to know if
the above info shines a different light on it.

-----Original Message-----
From: "Steven Peck" <[EMAIL PROTECTED]>
Date: Wed, 2 Jan 2008 14:26:58 -0800
X-Message-Number: 133

Examine the certificate.  Chances are the root certificate that your
vendor is using expired at some point and was never updated on your
Windows 2000 systems.  Figure out which one it is, hit the certificate
providers support site for instructions on how to download an updated
chain.

Steven

On Jan 2, 2008 1:55 PM, Mayo, Bill <[EMAIL PROTECTED]> wrote:
> We have a vendor that changed their certificate over the weekend and
now
> have mixed issues with our staff accessing the site.  Connecting to
the
> site with a Windows 2000 machine or a browser other than IE (in XP or
> other) will cause a message come up asking if you want to trust the
> certificate.  On XP, there is no such prompting, but it works for some
> people and not for others.  It looks like the certificate is
> automatically being trusted or declined for XP staff, but we can't
> figure out why it works for some, but not others.  From what we can
see,
> it is user-specific--it works for one user on a computer, but not
> another.  The local permissions don't seem to be an issue (we made one
> of the users an administrator temporarily with no joy).
>
> If you connect to the site in Firefox, it explicitly states that it is
> unable to verify the certificate.  I have attempted exporting the
> certificate from a working connection and importing it as a trusted
site
> for a non-working user with no success (I will admit that I just
barely
> know what I am doing in that regard).
>
> Googling hasn't turned up anything to this point that was helpful.
Does
> anyone have any idea what might cause that behavior and what might be
> done to correct it?
>
> Bill Mayo
> Pitt County MIS

~ Upgrade to Next Generation Antispam/Antivirus with Ninja!    ~
~ <http://www.sunbelt-software.com/SunbeltMessagingNinja.cfm>  ~

Reply via email to