|Applies To||Sentry CA 3.x|
Keon Certificate Authority
Microsoft Internet Explorer
Microsoft Windows NT 4.0
|Issue||How to minimize problems using MSIE when installing Sentry CA more than once?|
|Cause||Microsoft Internet Explorer may encounter problems installing Sentry CA more than once. MSIE will not allow one to connect to a newly created Admin Server if a previously installed Admin certificate already exists in its local database. Even though a full installation will succeed, you will not be able to access the new Admin server unless you first delete the previous Admin certificate from the Windows NT Registry.|
|Resolution||The local certificate database is located in:|
Note: You must print the subtree in order to determine which certs to delete.
Note: Microsoft has this to say with respect to editing the Registry on any PC:
"Warning: Using Registry Editor incorrectly can cause serious problems that may require you to reinstall your operating system. Microsoft cannot guarantee that problems resulting from the incorrect use of Registry editor can be solved. Use Registry Editor at your own risk. For information about how to edit the registry, view the "Changing Keys And Values" online Help topic in Registry Editor (Regedit.exe) or the "Add and Delete Information in the Registry" and "Edit Registry Data" online Help topics in Regedt32.exe. Note that you should back up the registry before you edit it."
Using Cert Manager to delete keys/certs from MSIE/Outlook:
It is easier to use MS Cert Manager to delete certificates from IE's certificate database. This tool (certmgr.exe) is obtainable from Microsoft's website, unfortunately packaged inside the Java Development Kit: http://www.microsoft.com/java/download/dl_sdk40.htm
Additional documentation on Certmgr can be found at: http://support.microsoft.com/support/kb/articles/q167/8/37.asp?FR=0
(This is an article about the Internet Client SDK but documents Certmgr adequately.)
|Legacy Article ID||a3603|