How to minimize problems using MSIE when installing Sentry CA more than once? | RSA Community

Loading

Skip to Navigation Skip to Main Content

How to minimize problems using MSIE when installing Sentry CA more than once?

3 years ago

Originally Published: 2001-07-09

Article Number

000054702

Applies To

Sentry CA 3.x
Keon Certificate Authority
Microsoft Internet Explorer
Microsoft Windows NT 4.0
TechNote 0127

Issue

How to minimize problems using MSIE when installing Sentry CA more than once?

Cause

Microsoft Internet Explorer may encounter problems installing Sentry CA more than once. MSIE will not allow one to connect to a newly created Admin Server if a previously installed Admin certificate already exists in its local database. Even though a full installation will succeed, you will not be able to access the new Admin server unless you first delete the previous Admin certificate from the Windows NT Registry.

Resolution

The local certificate database is located in:

HKEY_CURRENT_USER\Software\Microsoft\SystemCertificates\My\Certificates

Note: You must print the subtree in order to determine which certs to delete.

Note: Microsoft has this to say with respect to editing the Registry on any PC:
"Warning: Using Registry Editor incorrectly can cause serious problems that may require you to reinstall your operating system. Microsoft cannot guarantee that problems resulting from the incorrect use of Registry editor can be solved. Use Registry Editor at your own risk. For information about how to edit the registry, view the "Changing Keys And Values" online Help topic in Registry Editor (Regedit.exe) or the "Add and Delete Information in the Registry" and "Edit Registry Data" online Help topics in Regedt32.exe. Note that you should back up the registry before you edit it."

Using Cert Manager to delete keys/certs from MSIE/Outlook:

It is easier to use MS Cert Manager to delete certificates from IE's certificate database. This tool (certmgr.exe) is obtainable from Microsoft's website, unfortunately packaged inside the Java Development Kit: http://www.microsoft.com/java/download/dl_sdk40.htm

Additional documentation on Certmgr can be found at: http://support.microsoft.com/support/kb/articles/q167/8/37.asp?FR=0
(This is an article about the Internet Client SDK but documents Certmgr adequately.)

Don't see what you're looking for?

Loading

How to minimize problems using MSIE when installing Sentry CA more than once? | RSA Community