Monday, March 28, 2011


Internet Explorer 8 Self Signed Security Certificate Error - IP for the UR

I have a server in house that has a self-signed certificate used with SSL on top of IIS.

My pc runs windows 7 64 bit and IE 8. When I type in the address of the server from the pc IE 8 browser as in

IE explodes with certificate error messages.  I have searched the web including the solution of loading the certificate in the the local computer physical store of the trusted certificates when the site is not a trusted site and every permutation within. Still IE shows that there is a certificate problem.

What is worse is when I ask the web server to serve a file to my desktop, IE says the file is not available because the certificates don't match. Is this a problem with IE8, because IE7 was just fine as is Firefox - all version.


This issue can be caused by the Root Certificate missing in trusted root store of client machine.

You can open it from Internet explorer which will display the certificate. Click on the button Install Certificate to launch the Certificate Installation wizard.

If it cannot be fixed, please take the following steps to deploy root certificate via Group Policy:

Open Group Policy Management Console.

Find an existing or create a new GPO to contain the certificate settings. Ensure that the GPO is associated with the domain, site, or organizational unit whose users you want affected by the policy.

Right-click the GPO, and then select Edit. Group Policy Management Editor opens, and displays the current contents of the policy object.

In the navigation pane, open Computer Configuration\Windows Settings\Security Settings\Public Key Policies\Trusted Publishers.

Click the Action menu, and then click Import.

Follow the instructions in the Certificate Import Wizard to find and import the certificate.

If the certificate is self-signed, and cannot be traced back to a certificate that is in the Trusted Root Certification Authorities certificate store, then you must also copy the certificate to that store. In the navigation pane, click Trusted Root Certification Authorities, and then repeat steps 5 and 6 to install a copy of the certificate to that store.


About bench3 -

Haja Peer Mohamed H, Software Engineer by profession, Author, Founder and CEO of "bench3" you can connect with me on Twitter , Facebook and also onGoogle+

Subscribe to this Blog via Email :