Re: Google Chrome Update - SSL Cert Nightmare

[ssouth]

Re: Google Chrome Update - SSL Cert Nightmare

 

We seem to be having increasing issues with the smoothwall SSL certificate disappearing from PC's / Laptops. This seems to be connected to Google Chrome Updates.

 

The fix seems to be to let the Chrome Update complete \ Restart the PC to let group policy "push out" the certificate again, and then accept the SSL "Accept and continue" warning.

 

This is obviously causing disruption in classes and for teachers.

 

The are also plenty of instances where group policy isn't pushing out the certificate and we have to manually install it.

 

Is anyone else having this problem? And what is the fix?

 

Thanks in advance for any advice or tips.

 

Steve

[Sharkman]

Where is it being auto-installed by GP - trusted root?

Does the Chrome updates remove the cert entirely or does it just stop working on Chrome? I had one the other day where a rogue gpo was stopping chrome from working with the SSL, but not Edge or Firefox

[ssouth]

Where is it being auto-installed by GP - trusted root?

Does the Chrome updates remove the cert entirely or does it just stop working on Chrome? I had one the other day where a rogue gpo was stopping chrome from working with the SSL, but not Edge or Firefox

 

Yes - Trusted Root

 

It removes it - or its certainly not appearing in the list of certificates.

[Sharkman]

Strange - can you see the certificate before updating Chrome? Does it disappear from certmgr.msc when you close Chrome to let it update? How strange

[ssouth]

Turns out the chrome update issue was a red herring as regards the certificate. The PC's for some reason weren't fully processing the group policy and then deleting the certificate. I rebooted one of our DC's and it seems to have sorted the issue.