Trusted Root Certificate issues

[NokiX]

Hi All,

 

We are working on deploying a self signed root certificate for our firewall to all the pupil machines in the school and after testing it on quite a few machines (10+ in different rooms) which it worked fine on we decided to push the policy live. Unfortunately we have had reports that some users are getting certificate errors and upon checking this it looks like the policy is applying to their machines but the certificate is not being installed at all.

 

I am unsure exactly why this is happening since the policy worked fine in all of our tests but I have tried looking through event logs and found there are no errors at all and the policy shows as being applied so as far as I can see there should be no issue! I can however manually install the cert on the machines affected but this is looking to be quite a large job if that's what is required since I have to log in as an admin to each one and open up the certificate MMC for the computer rather than the user to install the cert correctly.

 

Has anyone experienced this issue before as I am unsure how I can fix this via group policy without having to manually fix each machine.

[Davit2005]

Not seen an issue TBH, have deployed many certs including self signed for Firewall.

 

What OS's are you trying to deploy to??

Edited February 1, 2016 by Davit2005

[NokiX]

I'm deploying to Windows 7 machines only, both 64 and 32 bit machines however I tested the policy in 3 of our ICT rooms on new and older PC's and everything was fine but it seems some of the older laptops and PC's in our library are just not accepting the certificate. To be honest those are all machines which have not been re-imaged in years so it could be a bad image they are using or just have some other issue.

 

The annoying part is that the event log literally has no errors in at all even after clearing it and forcing a policy update it just shows all policies applied without issue. Looks like I'm taking a break from setting up Mac's to get this problem sorted today!

[Davit2005]

At an elevated prompt on a machine that i't not working run a gpresult /h c:\results.html you might have to change the file path to a folder on C drive though. Just to make sure it is picking up the policy.