Re: Unable to Install Secure Certificate with use for NAFN.gov website



Certificates and their associated private keys are not available when a user
who has a roaming user profile uses a Windows 2000-based computer to log on
to the network
http://support.microsoft.com/kb/891308/en-us

Roaming Profiles Cannot Create Key Containers
http://support.microsoft.com/kb/265357/en-us

If no joy, I take it the Win2K is SP-4 w/ all subsequent updates? High
encryption pack installed?
http://www.microsoft.com/windows2000/downloads/recommended/encryption/default.mspx
Sometimes installing service packs in Win2K will corrupt this and it needs
to be reinstalled.
--

Jon R. Kennedy MS MVP/IE
Charlotte, NC USA
jkennedy2@xxxxxxxxxxxxxxx


"Steve Lee" <Steve Lee@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message
news:E075A55D-24C9-49A5-9DFF-BD9C61192D41@xxxxxxxxxxxxxxxx
Hi,

Wondering if anyone can help, I have a user here running Internet Explorer
6
SP1 under windows 2000, as a user on an AD domain. I have tried several
fixes
but none seem to work, I keep getting an error message when trying to
install
a certificate saying either :The private key cannot be found or the csp
settings are not valid, I have given the user admin rights, and local
admin
rights to the C:\winnt\sys32\microsoft\crypto\rsa\ folder all to no avail,
has anyone else had this problem? is this a problem at my end or a fault
with
the site issuing the certificates? I have contacted the IT guys from NAFN
and
they don't have a clue, everything they can think of I have tried. Your
help
would be greatly appreciated.


.



Relevant Pages

  • Re: X.509 certificate generation
    ... For information on how private keys are stored in Windows 2000, ... Scroll about half way down to the topic "How Certificates Are Stored". ... This is followed by a discussion of "How Private Keys Are Stored". ...
    (microsoft.public.win2000.security)
  • Re: Locked out; forgot my administrative password
    ... EFS, Credentials, and Private Keys from Certificates Are Unavailable After a Password Is ... Reset ... How to Log On to Windows XP If You Forget Your Password or Your Password Expires ...
    (microsoft.public.windowsxp.newusers)
  • [NT] Windows File Protection Arbitrary Certificate Chain Vulnerability
    ... Beyond Security would like to welcome Tiscali World Online ... Windows File Protection will trust any digital signature whose certificate ... chain is rooted at any one of the Trusted Root Certification Authorities. ... chains but also as valid Root CA's for code signing certificates. ...
    (Securiteam)
  • Re: How to fix broken security in Windows 2000?
    ... explicitly identify the missing certificates using SFC or some other tool. ... it turns out Windows 2000 doesn't support that feature after ... all W2K machines have the problem seems to be holding up (and I have not yet ...
    (microsoft.public.security)
  • Re: How to fix broken security in Windows 2000?
    ... explicitly identify the missing certificates using SFC or some other tool. ... it turns out Windows 2000 doesn't support that feature after ... all W2K machines have the problem seems to be holding up (and I have not yet ...
    (microsoft.public.win2000.security)