none
Internet Explorer 11 https certificate error RRS feed

  • Question

  • Hi,

    

    I have been getting certificate errors from most of https websites on my enterprise computers (wich are on a network domain). The problema resides mostly in computers with Windows Vista x86 Business and Windows 7 x64 Professional with SP1. I started having this erros after Internet Explorer upgraded to version 10. Today most computers with Windows 7 on my network have Internet Explorer 11.

    

    If I try to access https://www.google.pt it gives me a certificate error, if I try to acess https://login.live.com it also gives me a certificate error in Internet Explorer 11 and 10. I can access those websites with Firefox or Chrome. But there are a few websites that also do not work on those browsers either. I have a bionic software that I need to install and the installation method is done throught the web, and because of the certificate error it does not let me install it.

    

    What is most odd is the fact that when I am installing a new workstation, before I join the domain, I can access those websites and I dont get certificate errors. Also, if I try to access those websites on my DNS server I dont get certificate errors either.

    

    I tested this on some workstations without Kaspersky Endpoint Security Agent installed, but I still get certificate errors.

    

    I do not know what else I can do really.

    

    Can anyone help me out?

    

    Thanks everyone.

    Wednesday, March 12, 2014 9:35 AM

Answers

  • Hi,

    I ended up exporting the certificates from another computer and import it to all the computers.

    Thanks.

    • Marked as answer by Carlos Sota Sunday, July 20, 2014 11:46 AM
    Sunday, July 20, 2014 11:45 AM

All replies

  • "Set the clock"
    Please check your Date & Time settings. 

    Also See Microsoft Windows Help & How-to:
    About certificate errors
    Certificate errors: frequently asked questions

    Best regards, 


    Vincenzo Di Russo
    Microsoft® MVP Windows Internet Explorer, Windows & Security Expert - since 2003.
    Moderator in the Microsoft Community and TechNet Forums
    My MVP Profile

    Wednesday, March 12, 2014 10:54 AM
  • Hi Vincenzo,

    I don't beleive it is a Date & Time problem, that was my very first guess when i started having this problem, all the computers in the domain have the right Date & Time settings.

    Thanks for your reply.

    Wednesday, March 12, 2014 11:46 AM
  • Hi Carlos,

    Have you tried to add these website to "Trusted Sites", then tes the result again.

    Check your security settings. Sometimes security software will block a webpage for no apparent reason. If you trust the website, adjust your software to allow IE to display the page

    If doesn't work, then refer to this KB,

    FIX: Certificate error when you try to visit an SSL Web site by using Internet Explorer 7: "There is a problem with this website's security certificate"

    http://support.microsoft.com/kb/954312/en-us

    http://support.microsoft.com/kb/950067/en-us

    Before any registry changs, make sure to backup the registry first sine incorrect operation will cause serious problem

    http://support.microsoft.com/kb/322756/en-us


    Yolanda Zhu
    TechNet Community Support

    Thursday, March 13, 2014 2:18 AM
    Moderator
  • Hi Carlos,

    Have you tried to add these website to "Trusted Sites", then tes the result again.

    Check your security settings. Sometimes security software will block a webpage for no apparent reason. If you trust the website, adjust your software to allow IE to display the page

    If doesn't work, then refer to this KB,

    FIX: Certificate error when you try to visit an SSL Web site by using Internet Explorer 7: "There is a problem with this website's security certificate"

    http://support.microsoft.com/kb/954312/en-us

    http://support.microsoft.com/kb/950067/en-us

    Before any registry changs, make sure to backup the registry first sine incorrect operation will cause serious problem

    http://support.microsoft.com/kb/322756/en-us


    Yolanda Zhu
    TechNet Community Support

    Hi v-yozhu,

    The website is already on trusted sites list.

    I have added those websites to the white list but no luck.

    I have tried those hotfix but still doesn't work.

    When I try to access those websites, I have the following message in Event Viewer:

    "Failed to add the certificate to the trust of third-party certification authorities archive: Access Denied"

    Thanks

    Friday, March 14, 2014 10:29 AM
  • I have three W7/64 computers. 2 days ago I couldn't even log onto netflix using IE11 or WMC. Same issue and time is not the problem. I can log onto netflix using Firefox though, but WMC doesn't use that to validate the account. The other 2 systems work flawlessly. Nothing in log files as well.

    This is not confined to domain or DNS (IMO). It is something with MS products.

    Saturday, March 15, 2014 5:43 PM
  • Hi,

    I note that this issue occurred after you joined to the domain, I suspect that there should be a policy applied which causes this issue, as I know, member of Domain Admins group or the Enterprise Admins can prevent users from trusting third-party root certification authorities with a Group Policy, you can see this link

    http://technet.microsoft.com/en-us/library/cc780117(v=ws.10).aspx
    I suggest you check the policy or contact the admins


    Yolanda Zhu
    TechNet Community Support

    Tuesday, March 18, 2014 1:21 AM
    Moderator
  • Hi,

    I note that this issue occurred after you joined to the domain, I suspect that there should be a policy applied which causes this issue, as I know, member of Domain Admins group or the Enterprise Admins can prevent users from trusting third-party root certification authorities with a Group Policy, you can see this link

    http://technet.microsoft.com/en-us/library/cc780117(v=ws.10).aspx
    I suggest you check the policy or contact the admins


    Yolanda Zhu
    TechNet Community Support

    Hi v-yozhu,

    I am a domain admin, and in 

    Trusted Root Certification Authorities I got selected the following options:

    "Allow users to select new root certification authorities (CAs) to trust"

    "Third-Party Root Certifications Authorities and Enterprise Root Certification Authorities"

    and

    "Registered in Active Directory only"

    Thanks

    Tuesday, March 18, 2014 12:52 PM
  • Hi,

    I ended up exporting the certificates from another computer and import it to all the computers.

    Thanks.

    • Marked as answer by Carlos Sota Sunday, July 20, 2014 11:46 AM
    Sunday, July 20, 2014 11:45 AM
  • You're welcome & Thank you for the update.

    Best of Luck,


    Vincenzo Di Russo
    Microsoft® MVP Windows Internet Explorer, Windows & Security Expert - since 2003.
    Moderator in the Microsoft Community and TechNet Forums
    My MVP Profile

    Sunday, July 20, 2014 12:15 PM
  • The really problem is the antivirus. Bitdefender blocks Chrome and IE on my Laptop. Firefox works good.
    Friday, April 13, 2018 12:10 AM
  • I uninstalled Bitdefender and everything was fine until I reinstall it.
    Friday, April 13, 2018 12:12 AM