Windows 8: Certificate install through website fails

internet explorerssl-certificatevpnwindows 8

I've installed Windows 8 Enterprise replacing Windows 7 Professional. Windows 8 comes with Internet Explorer 10. The company policy requires logging into a site through IE and then requesting for a VPN certificate and finally installing that VPN certificate all from within IE. The problem is that IE 10 is not opening the request page and throws a "The page can't be displayed" error. I can open the page in Chrome by clicking "Proceed Anyway" on the "Site certificate is invalid" warning but then it won't go further. The site is designed to run on IE and I believe it uses some certificate access COM dlls internally (certadm.dll). I can't install any other version of IE because Win 8 do not support it. The only option I am left with is to UNINSTALL Windows 8 but I want to make sure there's no solution before I do that.
Any Ideas? Some way to debug the problem in IE?

Best Answer

According to various reports from Fortune and InformationWeek, many enterprise users have experienced compatibility issues with their new copies of Windows 8 Enterprise. Many of these issues involve older programs that were primarily designed to work with Windows XP and Windows 7. These issues can sometimes extend to programs intended to work with Internet Explorer. Unfortunately, the VPN certificate you’re using may not be compatible with IE 10. The best solution is to consult your network administrators about this issue. If your network admins aren’t able to resolve the issue, you may have to uninstall Windows 8.

http://www.dell.com/us/p/d/campaigns/windows-8-consumer

Related Solutions

Internet explorer fails to load part of pages or images

A) It's a bit tricky, but you might need to find the files that conflicker modified/infected and make sure there isn't a config file (or registry) somewhere in the computer(s) blocking access to the addresses those websites are trying to get to. A great tool for finding modified (unusually configured registry settings, DLLs and other windows system files) is hijackthis from Trend Micro.

You might want to do a view source on the webpage and see what addresses aren't loading and do systematic troubleshooting from that perspective

B) Ultimately, I would say "re-install everything!" but I don't know your situation. I'm somewhat neurotic about viruses so I would re-install if I could.

SSL Certificate – How to Download SSL Certificate from a Website

In order to download the certificate, you need to use the client built into openssl like so:

echo -n | openssl s_client -connect $HOST:$PORTNUMBER -servername $SERVERNAME \
    | openssl x509 > /tmp/$SERVERNAME.cert

That will save the certificate to /tmp/$SERVERNAME.cert.

The -servername is used to select the correct certificate when multiple are presented, in the case of SNI.

You can use -showcerts if you want to download all the certificates in the chain. But if you just want to download the server certificate, there is no need to specify -showcerts. The x509 at the end will strip out the intermediate certs, you will need to use sed -n '/-----BEGIN/,/-----END/p' instead of the x509 at the end.

echo -n gives a response to the server, so that the connection is released

openssl x509 removes information about the certificate chain and connection details. This is the preferred format to import the certificate into other keystores.

Best Answer

Related Solutions

Internet explorer fails to load part of pages or images

SSL Certificate – How to Download SSL Certificate from a Website

Related Topic