CAs from KCA not trusted after applying Microsoft Fix Q329115
2 years ago
Originally Published: 2003-01-13
Article Number
000057702
Applies To
Keon Certificate Authority 6.0.2
Sun Solaris 2.8
Microsoft Security Update (Q329115)
Issue
CAs from KCA not trusted after applying Microsoft Fix Q329115
Customer reported that development certificates are now invalid when using an IE browser with MS update Q329115 applied
Microsoft Fix Q329115 information Link
Cause
MS Fix addresses a security issue if the Basic Constraint extension is missing from subordinate C
Resolution
To correct this issue, resign the subordinate CA and include the Basic Constraint extension. NOTE: The newly signed certificate will need to replace the old certificate. The certificate chain will still be valid with any existing certificates that were issued previously.