{"id":777,"date":"2011-06-27T12:12:35","date_gmt":"2011-06-27T11:12:35","guid":{"rendered":"http:\/\/www.kozeniauskas.com\/itblog\/?p=777"},"modified":"2013-05-22T19:51:19","modified_gmt":"2013-05-22T18:51:19","slug":"windows-does-not-have-enough-information-to-verify-this-certificate","status":"publish","type":"post","link":"http:\/\/www.kozeniauskas.com\/itblog\/2011\/06\/27\/windows-does-not-have-enough-information-to-verify-this-certificate\/","title":{"rendered":"Windows does not have enough information to verify this certificate."},"content":{"rendered":"

Here come SSL certificates again. In recent Operating Systems Microsoft made some changes in Root certificates by removing some of them. Probably the best way to illustrate this is try to install Java on Server 2008 R2. When you try to install it you\u2019ll get the following error:
\nError 1330. A file that is required cannot be installed because the cabinet file Data1.cab has an invalid digital signature. This may indicate that the cabinet file is corrupt.<\/em>
\n\"\"<\/a>
\n
\nThe SSL certificate that the file is digitally signed with is not trusted by the OS. Although if you use the same file to install Java on Windows 2003 server it would work fine.
\nTo check what is happening with the file right click on it and go into properties.
\nSelect Digital Signatures tab and click on Details.
\nYou should see something like this:
\n\"\"<\/a><\/p>\n

The error says:
\nThe certificate in the signature cannot be verified.<\/em><\/p>\n

Click on View Certificate
\n\"\"<\/a><\/p>\n

Again there is exclamation mark and it states that:
\nWindows does not have enough information to verify this certificate.<\/em><\/p>\n

Click on Certification Path tab
\n\"\"<\/a><\/p>\n

Here we can see that the certificate that is used to sign the application is fine but the one above it is not.
\nSelect that certificate and click on view certificate
\n\"\"<\/a><\/p>\n

We see the same error as before
\nWindows does not have enough information to verify this certificate.<\/em><\/p>\n

Click on Certification Path tab
\n\"\"<\/a><\/p>\n

Here we don\u2019t see any other certificates and the error says that:
\nThe issuer of this certificate could not be found.<\/em>
\nClick on Details tab and select the issuer
\n\"\"<\/a><\/p>\n

Here you can see the details about the issuer. If you check the certificate stores you’ll see that there is no corresponding certificates for this issuer and therefor it is not trusted.
\nGo to http:\/\/www.verisign.com\/support\/roots.html<\/a> here you can download all root certificates the one we need is VeriSign Class 3 Public Primary CA – G2<\/strong> as stated in the image above. <\/strong>You can download all root certificates from http:\/\/www.verisign.com\/support\/roots.zip<\/a> or just\u00a0a PEM file for the specific certificate.
\nOnce downloaded install the certificate and\u00a0install\/import it\u00a0to Trusted Root Certification Authorities<\/strong> <\/strong>store.
\nIf you want to install the certificate under Computer account use MMC console to install the certificate.
\nOnce certificate is installed right click on the cab file again and check digital signature. It should say:
\nThis digital signature is OK.
\n\"\"<\/a><\/em><\/p>\n","protected":false},"excerpt":{"rendered":"

Here come SSL certificates again. In recent Operating Systems Microsoft made some changes in Root certificates by removing some of them. Probably the best way to illustrate this is try to install Java on Server 2008 R2. When you try to install it you\u2019ll get the following error: Error 1330. A file that is required […]<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":[],"categories":[4],"tags":[379,367,378,366],"_links":{"self":[{"href":"http:\/\/www.kozeniauskas.com\/itblog\/wp-json\/wp\/v2\/posts\/777"}],"collection":[{"href":"http:\/\/www.kozeniauskas.com\/itblog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"http:\/\/www.kozeniauskas.com\/itblog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"http:\/\/www.kozeniauskas.com\/itblog\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"http:\/\/www.kozeniauskas.com\/itblog\/wp-json\/wp\/v2\/comments?post=777"}],"version-history":[{"count":5,"href":"http:\/\/www.kozeniauskas.com\/itblog\/wp-json\/wp\/v2\/posts\/777\/revisions"}],"predecessor-version":[{"id":790,"href":"http:\/\/www.kozeniauskas.com\/itblog\/wp-json\/wp\/v2\/posts\/777\/revisions\/790"}],"wp:attachment":[{"href":"http:\/\/www.kozeniauskas.com\/itblog\/wp-json\/wp\/v2\/media?parent=777"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"http:\/\/www.kozeniauskas.com\/itblog\/wp-json\/wp\/v2\/categories?post=777"},{"taxonomy":"post_tag","embeddable":true,"href":"http:\/\/www.kozeniauskas.com\/itblog\/wp-json\/wp\/v2\/tags?post=777"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}