000018807 - How to minimize problems using MSIE when installing Sentry CA more than once?

Document created by RSA Customer Support Employee on Jun 16, 2016Last modified by RSA Customer Support Employee on Apr 21, 2017
Version 2Show Document
  • View in full screen mode

Article Content

Article Number000018807
Applies ToSentry CA 3.x
Keon Certificate Authority
Microsoft Internet Explorer
Microsoft Windows NT 4.0
TechNote 0127
IssueHow to minimize problems using MSIE when installing Sentry CA more than once?
CauseMicrosoft Internet Explorer may encounter problems installing Sentry CA more than once. MSIE will not allow one to connect to a newly created Admin Server if a previously installed Admin certificate already exists in its local database. Even though a full installation will succeed, you will not be able to access the new Admin server unless you first delete the previous Admin certificate from the Windows NT Registry.
ResolutionThe local certificate database is located in:


Note: You must print the subtree in order to determine which certs to delete.

Note: Microsoft has this to say with respect to editing the Registry on any PC:
"Warning: Using Registry Editor incorrectly can cause serious problems that may require you to reinstall your operating system. Microsoft cannot guarantee that problems resulting from the incorrect use of Registry editor can be solved. Use Registry Editor at your own risk. For information about how to edit the registry, view the "Changing Keys And Values" online Help topic in Registry Editor (Regedit.exe) or the "Add and Delete Information in the Registry" and "Edit Registry Data" online Help topics in Regedt32.exe. Note that you should back up the registry before you edit it."

Using Cert Manager to delete keys/certs from MSIE/Outlook:

It is easier to use MS Cert Manager to delete certificates from IE's certificate database. This tool (certmgr.exe) is obtainable from Microsoft's website, unfortunately packaged inside the Java Development Kit: http://www.microsoft.com/java/download/dl_sdk40.htm

Additional documentation on Certmgr can be found at: http://support.microsoft.com/support/kb/articles/q167/8/37.asp?FR=0
(This is an article about the Internet Client SDK but documents Certmgr adequately.)
Legacy Article IDa3603