RE: Problem with Windows 2003 SP2 and user certificate

Tech-Archive recommends: Repair Windows Errors & Optimize Windows Performance



Hi Ryan

Thanx for your quick answer, but:

The ceritificate is marked as Purpose - Client Authentication and should
show up in the Personal tab - but doesn't.

There is a yellow exclamation mark on the Key Usage element, but no
explanation. Certification status says that The certificate is OK.

Any comments ?

regards,
Dean M. P.

"Ryan Hanisco" wrote:

Hi Dean,

I would look at the template form and the intended purpose codes on the
certificate. If this is a cert marked for Client Authentication, it will add
correctly. If it is just a user cert and is not formed correctly, it will
add as "other people" as though it were a cert for validating the source of
an e-mail or the like.

Check the cert to make sure that there are no errors on it. 2003 is more
sensitive to cert issues than older OSs and enforces the security.
--
Ryan Hanisco
MCSE, MCTS: SQL 2005, Project+
http://www.techsterity.com
Chicago, IL

Remember: Marking helpful answers helps everyone find the info they need
quickly.


"Dean Molchovic Petersen" wrote:

On a windows 2003 SP2 server, we need to install a usercertificate that will
validate the user to a website.

Installing the ceritificate via MMC\Certificates\Personal\My user account in
the personal folder result in the certificate being displayed under Other
People Tab rather than Under the Personal Tab.

IE version is 6.0.3760.3959

The problem seems only to occur under Windows 2003 SP2.

This means that the certificate is useless. We have tried installing the
certificate on Windows 2003 SP1 and on Windows XP computers with no problems.

Anyone ?

Regards,
Dean M.P.


.



Relevant Pages

  • Re: Certificate Installation Question
    ... Is it possible to have a local computer Client Authentication certificate ... have the cert as a file. ... >> with my CMAK install. ...
    (microsoft.public.internet.radius)
  • RE: using personal signatures for remote authentication
    ... Your e-mail signing certificate doesn't have right attributes to be used as ... client authentication cert, not e-mail cert. ... > install on the computer I use at the client site. ...
    (microsoft.public.security)
  • RE: using personal signatures for remote authentication
    ... Your e-mail signing certificate doesn't have right attributes to be used as ... client authentication cert, not e-mail cert. ... > install on the computer I use at the client site. ...
    (microsoft.public.dotnet.security)
  • IIS and cert dialog on client
    ... IIS wants cert from the user, ... on client will appear the dialog: Client Authentication, ... to select the certificate I want to use when connecting... ...
    (microsoft.public.platformsdk.security)
  • Re: Insurance Certificates Database
    ... table based on a questionnaire, ... We did have a commercial certificate tracking application a while back, ... I agree my Indefinite Cert Fields look like fixed attributes of the ... firm. ...
    (microsoft.public.access.tablesdbdesign)