2
Issues with Intermediate certificates...
Question asked by Eric Tykwinski - 9/16/2015 at 9:36 AM
Answered
This has become sort of a thorn in my side, so hoping someone else has an answer.
We've got a Positive SSL certificate which comes with 2 intermediate certificates.  My problem is that the third certificate (COMODO RSA Domain Validation) keeps getting installed in the Trusted Root Certification Authorities folder.  Normal web browsers are fine, but it breaks ActiveSync for Android phones.  It's easy to fix by just deleting the cert from the Root folder and rebooting, but it's happened now 3 times and I can't figure out why.
 
Any help would be appreciated...

5 Replies

Reply to Thread
0
Bruce Barnes Replied
Never trust the "auto install" certificate feature. Use the CERTIFICATE feature in MMC and install the cert in the proper category for the LOCAL MACHINE .
Bruce Barnes
ChicagoNetTech Inc
brucecnt@comcast.net

Phonr: (773) 491-9019
Phone: (224) 444-0169

E-Mail and DNS Security Specialist
Network Security Specialist

Customer Service Portal: https://portal.chicagonettech.com
Website: https://www.ChicagoNetTech.com
Security Blog: http://networkbastion.blogspot.com/

Web and E-Mail Hosting, E-Mail Security and Consulting
1
Henry Timmes Replied
Marked As Answer
Don't delete it, you need to disable it. 
 
1) Right Click on the Cert -- Select Properties. 
2) Check the box that says "Disable all purposes for this certificate"
3) Click Ok
4) Restart IIS or Reboot your PC
5) Thank Me :) 
 
 
www.unlocktheinbox.com
0
Eric Tykwinski Replied
:laughs... Henry, thanks for the advice. I'll give it a shot next time it magically appears.
0
Eric Tykwinski Replied
Henry, Next time your in Philly, I owe you a beer... Worked like a charm post reboot.
0
Henry Timmes Replied
I'm glad it worked for you, I had a similar issue a few weeks ago and it frustrated the heck out of me. So that's why I knew how to correct it. I don't normally read the community posts - I was updating a ticket for Smartermail - I clicked on community button, instead of the ticket button on accident and seen your question on the front screen. So you have a guardian angel or something looking out for you to make that exact sequence happen at the right time, to get you the answer you were looking for. Or maybe my Beer Angel was looking out for me :)
www.unlocktheinbox.com

Reply to Thread