ADCS Installation (Part 9): Another problem: certificates on Windows XP SP3 computers display "This certificate has an nonvalid digital signature."


i have installed 1 user certificate , 1 web server certificate online issuing ca. both certificates fine without problems on issuing ca server via certificate authority mmc console.

however, when ran certificate authority mmc console windows xp sp3 computers, both of certificates contains following info:
on general tab, displays
          the integrity of certificate cannot guaranteed.
          the certificate may corrupted or may have been altered.
on certification path tab, displays: this certificate ok offline root ca this certificate has nonvalid digital sgnature online issuing ca , user certificate.

have selected rsa#microsoft software key storage provider cryptography ca. , targeted computers running windows xp sp3.

, certutil command
          c:\> certutil -getreg ca\csp\provider
          provider reg_sz = microsoft software key storage provider.

selection of provider caused problem?

if yes, can use certutil -setreg ca\csp\provider change provider microsoft strong cryptographic provider ? believe provider must compitable windows xp sp3.

thanks,

sjj123

ummmm. remove nospam part <g>
i not post real email address picked more web crawlers

brian


Windows Server  >  Security



Comments

Popular posts from this blog

some help on Event 540

WMI Repository 4GB limit - Win 2003 Ent Question

Event ID 1302 (error 1307) DFS replication service encountered an error while writing to the debug log file