IE to trust a certificate

[FN-GM]

Hi,

 

We have an internal site and we have to use HTTPS for it, the site is using a self assigned certificate. Is it possible to configure IE in group policy to not show the certificate error screen please?

 

Thanks

 

Z

[Midget]

click on the cert error in the bar, install cert and change the install location to the trusted store. done.

[FN-GM]

This needs to be done in Group Policy.....

 

would i use this - http://technet.microsoft.com/en-us/library/cc728449(WS.10).aspx

[FN-GM]

Ok thanks, im stuck already

 

On the Signature certificate, it want a certificate from the store. What do i do here, do i import im existing on into there?

 

Z

[SYNACK]

What you want is a copy of the cert used for the internal site to add into the trusted list, you only need the public key so you can either go into IIS on the host machine and export it from there. Or you could go to the site in ie, open up the page properties, click the certificates button and export it from there.

 

The other thig that you can do is to export a copy of the root certificate for the issuing computer (your cert server) and import that. That will tell your machines to trust anything signed by it if you have it in your trusted root providers folder.

[FN-GM]

What you want is a copy of the cert used for the internal site to add into the trusted list, you only need the public key so you can either go into IIS on the host machine and export it from there. Or you could go to the site in ie, open up the page properties, click the certificates button and export it from there.

 

This is what i have done, and i am stuck at the point said on by previous post.

 

Thanks

[SYNACK]

Sorry, I have no idea where you are stuck given that I find it quite difficult to understand some of what you type, some of your descriptions also seem incomplete. Anyhow I have found an extremely comprehensive page that goes through the procedure step by step with screenshots and annotations:

Deploying a Self-Signed Root Certificate with Group Policy

hopefully this will get it going for you.

[FN-GM]

Thanks for link, it was me in the end getting it wrong

 

Z

[cookie_monster]

Disclaimer - We'll also note that we are not even remotely approaching PKI or Group Policy experts, and we have mainly muddled through several of the choices offered on the road to something that appears to work well. We'd certainly welcome input from those who actually know this stuff.

 

I take it that it works well then?