+ Post New Thread
Results 1 to 8 of 8
Windows 7 Thread, windows 7 certificates error in Technical; i have a problem i've done a clean install of windows 7. but now when i access any website or ...
  1. #1
    andy_nic's Avatar
    Join Date
    Jun 2008
    Location
    Peterborough
    Posts
    445
    Thank Post
    31
    Thanked 39 Times in 33 Posts
    Rep Power
    19

    windows 7 certificates error

    i have a problem i've done a clean install of windows 7. but now when i access any website or service that needs to access a certificate. it rejects it saying it is invalid. but they are vailed. because they work on other computers fine. just not my windows 7, my colleague did a upgrade from vista to windows 7 and his is fine.

    the error is "this certificate cannot be verified up to a trusted certification authority"
    Last edited by andy_nic; 5th January 2010 at 11:52 AM.

  2. #2

    Join Date
    May 2007
    Location
    Barrow-in-Furness, Cumbria
    Posts
    9
    Thank Post
    3
    Thanked 0 Times in 0 Posts
    Rep Power
    0
    currently searching for a solution to this aswell

    from what i have found windows 7 needs to veryify certificate chains with the windowsupdate website directly via port 80, when you are locked behind a RBC internet connection with only filtered access via a proxy this seems to fail as it doesnt use the IE proxy settings properly

  3. #3
    RichB's Avatar
    Join Date
    Oct 2008
    Location
    A Nice School
    Posts
    399
    Thank Post
    142
    Thanked 51 Times in 38 Posts
    Rep Power
    71
    its to do with your secruity in ie8, had the same problem I ended up re-installing the ie but the below KB should help

    How to use security zones in Internet Explorer

  4. #4
    andy_nic's Avatar
    Join Date
    Jun 2008
    Location
    Peterborough
    Posts
    445
    Thank Post
    31
    Thanked 39 Times in 33 Posts
    Rep Power
    19
    Quote Originally Posted by PHolland View Post
    currently searching for a solution to this aswell

    from what i have found windows 7 needs to veryify certificate chains with the windowsupdate website directly via port 80, when you are locked behind a RBC internet connection with only filtered access via a proxy this seems to fail as it doesnt use the IE proxy settings properly
    @PHolland, i think your right that is what i have found too, but i didn't know that its because of the proxy.

  5. #5

    Join Date
    Oct 2008
    Posts
    2
    Thank Post
    0
    Thanked 0 Times in 0 Posts
    Rep Power
    0
    I am also having this problem.

    I have contacted the ISP to see if anything can be done thier end. I know they have made proxy exceptions before for stuff like the LA VLE?

    The trusted sites option is only a short term work around as you cannot set every site you want to view as a trusted site? Unless there is something i've missed here?

  6. #6
    andy_nic's Avatar
    Join Date
    Jun 2008
    Location
    Peterborough
    Posts
    445
    Thank Post
    31
    Thanked 39 Times in 33 Posts
    Rep Power
    19
    I fixed it Partly help by timg in this post Not getting Windows 7 Updates? when he said about
    netsh
    winhttp
    proxy proxyname.myschool:Port
    exit
    however i couldn't get this to work i did. open cmd type "netsh" then "winhttp" then " set proxy "insert proxy address"


    Andy

  7. #7
    DrCheese's Avatar
    Join Date
    Apr 2008
    Posts
    1,035
    Thank Post
    97
    Thanked 161 Times in 110 Posts
    Rep Power
    60
    Hi,
    You shouldn't need to set the netsh stuff, as it will use the logged in users proxy settings.
    However, you do need to make sure that you allow unauthenticated access to a few URL's, namely.

    Code:
    http://www.download.windowsupdate.com/msdownload/update/v3/static/trustedr/en/authrootstl.cab
    You may also need to allow access to the CRT/CRL of whoever issued your SSL certificate, in our case the top level cert was from "usertrust" Looking at our proxy logs revealed a ton of access denied for

    Code:
    http://crt.usertrust.com/AddTrustUTNSGCCA.crt
    http://crt.usertrust.com/AddTrustExternalCARoot.p7c
    Check your proxy logs for hits on "CRT" and "CRL" if you have another provider.

    It must be allowed unauthenticated access as it doesn't send the username to the proxy when it tries to download these.

    The reason for this is is that Windows 7 doesn't have the certs, or expired certs for a fair few providers out of the box. On Windows XP you used to download an update every few months with new certs "Windows root certificate update" which would allow these to work, But Windows 7 no longer has these, instead it reaches out across the Internet and downloads the authrootstl.cab above from Windows Update whenever it gets a cert it doesn't understand.

  8. #8

    Join Date
    Nov 2007
    Location
    Rotherham
    Posts
    1,678
    Thank Post
    122
    Thanked 126 Times in 102 Posts
    Rep Power
    46
    Had the same issue with my SmoothWall proxy. Needed to add some addresses into my "do not auth" list.

SHARE:
+ Post New Thread

Similar Threads

  1. Replies: 7
    Last Post: 16th September 2009, 09:52 AM
  2. Windows 7 deployment Error
    By jsnetman in forum Windows 7
    Replies: 1
    Last Post: 26th August 2009, 12:58 PM
  3. Windows Update Error
    By karldenton in forum Windows
    Replies: 4
    Last Post: 7th January 2009, 05:56 PM
  4. Windows Defender Error
    By SimpleSi in forum Windows
    Replies: 6
    Last Post: 9th January 2007, 01:45 AM

Thread Information

Users Browsing this Thread

There are currently 1 users browsing this thread. (0 members and 1 guests)

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •