What would make a PC decide that an SBS self-signed root certificate is revoked because it cannot contact the CRL distribution point?

I'm puzzled. Scenario is SBS 2008 with some web applications published to the internet over https. Users who access these have the SBSCertificate.cer (expiry 2018) installed in the Trusted Root Certificates store for their local PC. This used to work
fine, and in fact it still works fine for me, from my own non-domain joined PC connecting over the internet. However some users are now getting a "certificate revoked" error and cannot connect to the applications. Using Certificate Manager on these
client PCs, the properties for this certificate state that it is revoked. It is not in fact revoked, but the CRL is on a local network that is inaccessible from outside (no VPN). Why is this certificate accepted as OK by some external PCs, but not by others,
what is the setting that determines this?
Tim

Hi Tim,
Based on your description, would you please let me confirm something more?
1. "However some users are now getting a "certificate revoked" error and cannot connect to the applications."
Please let me know the complete error message.
2. Based on your description, I understand that this issue just occurred in some client computers. Other computers still run as normal. Would you please compare some configurations
of the problematic computer with a good one? Any update, please feel free to let me know.
Please refer to the following KB and articles and check if can help you.
IIS returns HTTP "403.13 Client Certificate Revoked"
error message although certificate is not revoked
Understanding
Certificate Revocation Checks
How Certificate Revocation Works
Hope this helps.
Best regards,
Justin Gu

Similar Messages

What would make YOU upgrade from a 2011 to a 2012 MBA?

What would make you upgrade from a 2011 MBA to a 2012 MBA?
For me, the following woud be important for an 13'' MBA upgrade:
keep the low weight or even improve it
do not sacrifice battery life
offer an 8 GB memory option
offer USB 3.0 in addition to Thunderbolt
Pretty simple, isn't it?

carl wolf wrote:
There is no "2012 MBA".
True, but expecting a similar cycle of time between revisions is no more "strange" than expecting 2013 to arrive. I call it confidence in Apple's innovation cycles.
Yes, I suppose it is "speculating" in the harsh sense of the word, but so would talk about Apple's mere existence in the future. Right?

HT1206 How do I find out an OLD password from 2006-2008. I have 3,000 pieces of music purchased from iTunes during those years that cannot be authorized because I cannot remember the password from that era. What can I do?

How do I find out an OLD password from 2006-2008. I have 3,000 pieces of music purchased from iTunes during those years that cannot be authorized because I cannot remember the password from that era. What can I do?

If you can't remember your password or security answers and don't have access to the email address (you didn't have a rescue email address on the account ?) then you can try contacting Support in your country and seeing if you can get the password reset and access to the account : http://support.apple.com/kb/HT5699 (they should also be able to reset the security questions)
If you can then update the primary email address on the account to be an address that you have access to.

HT201441 what if i cannot contact the original owner

what if i cannot contact the original owner i work at a pown shop yes we do take phone numbers we take pictures but most the time the # are fake and they pawn somthing never to pick it up and dont show back up or if they do show up you forget to ask them about it pluse they get angery you ask them about items that was once yours but anyways how could i get into this ipod without having to have the original owner?? i would really like the help!!!

You can't. Without being able to contact the previous owner I'm afraid it's useless to you.
These are the steps to take before buying a used iOS device in the future to ensure it doesn't happen again (from http://support.apple.com/kb/HT5818):
Follow each of these steps to make sure that you can use the device you purchase:
Turn the device on and slide to unlock.If the passcode lock screen or the home screen appears, the device has not been erased. Ask the seller to completely erase the device by going to Settings > General > Reset > Erase All Content and Settings. Do not take ownership of any used iPhone, iPad, or iPod touch until it has been erased.
Begin the device setup process.After choosing a language, choosing a country, and connecting to a network, the device will begin activation. If you are asked for the previous owner’s Apple ID and password, the device is still linked to their account. Hand the device back to the seller and ask them to enter their password. If the previous owner is not present, they can remove the device from their account by signing in to icloud.com/find. Do not take ownership of any used iPhone, iPad, or iPod touch until it has been removed from the previous owner’s account.
You will know that a device is ready for you to use when you are asked to “Set up your iPhone", “Set up your iPad", or “Set up your iPod” during the device setup process.

Is there a way to make a self-signed client certificate with keytool...

Is there a way to make a self-signed client certificate with keytool
that will install successfully into the personal store in IE?

hi,
It is possible to make a self-signed client certificate with keytool and i am successfully using in my dummy application.
The first thing you need to do is create a keystore and generate the key pair. You could use a command such as the following:
keytool -genkey -dname "cn=Mark Jones, ou=JavaSoft, o=Sun, c=US"
-alias business -keypass kpi135 -keystore C:\working\mykeystore
-storepass ab987c -validity 180
(Please note: This must be typed as a single line. Multiple lines are used in the examples just for legibility purposes.)
This command creates the keystore named "mykeystore" in the "working" directory on the C drive (assuming it doesn't already exist), and assigns it the password "ab987c". It generates a public/private key pair for the entity whose "distinguished name" has a common name of "Mark Jones", organizational unit of "JavaSoft", organization of "Sun" and two-letter country code of "US". It uses the default "DSA" key generation algorithm to create the keys, both 1024 bits long.
It creates a self-signed certificate (using the default "SHA1withDSA" signature algorithm) that includes the public key and the distinguished name information. This certificate will be valid for 180 days, and is associated with the private key in a keystore entry referred to by the alias "business". The private key is assigned the password "kpi135".
Also please go through the http://java.sun.com/j2se/1.3/docs/tooldocs/win32/keytool.html
This would help u better.
bye,
Arun

Itunes 11 will not install on my Windows 7 computer because it cannot start the 'Apple Mobile Device' service, what can I do?

itunes 11 will not install on my Windows 7 computer because it cannot start the 'Apple Mobile Device' service, what can I do?

Go to Control Panel > Add or Remove Programs (Win XP) or Programs and Features (Later)
Remove all of these items in the following order:
iTunes
Apple Software Update
Apple Mobile Device Support
Bonjour
Apple Application Support
Reboot, download iTunes, then reinstall, either using an account with administrative rights, or right-clicking the downloaded installer and selecting Run as Administrator.
See also HT1925: Removing and Reinstalling iTunes for Windows XP or HT1923: Removing and reinstalling iTunes for Windows Vista, Windows 7, or Windows 8
Should you get the error iTunes.exe - Entry Point Not Found after the above reinstall then copy QTMovieWin.dll from:
C:\Program Files (x86)\Common Files\Apple\Apple Application Support
and paste into:
C:\Program Files (x86)\iTunes
The above paths would be for a 64-bit machine. Hopefully the same fix with the " (x86)" omitted would work on 32-bit systems with the same error.
tt2

I need help in resolving a problem that prevents me from accessing the iTunes store. Message reads " iTunes cannot contact the iTunes store" and also says that my laptop is no longer authorized to access my account. Help!

I need help in resolving a problem that prevents me from accessing the iTunes store. Message reads " iTunes cannot contact the iTunes store" and also says that my laptop is no longer authorized to access my account. Help!

Go up to the top of your screen on iTunes and click on 'Store'. Then go down to 'Authorize This Computer'. That should cover part of it unless you've already authorized a bunch of other computers to use your account. If that's the case, you'll have to go to one of those computers and click the button just below it to 'deauthorize your account' from that computer. If you're not able to access the store, check your internet connection to make sure you are connected. Hope this helps.. good luck!

I have a Tritton TRI-BC200 hands free device that my iPhone 5 no longer "sees" on Bluetooth, so, I cannot pair the device. Anyone have a suggestion? Tritton no longer supports the device.

I have a Tritton TRI-BC200 hands free device that my iPhone 5 no longer "sees" on Bluetooth, so, I cannot pair the device. Anyone have a suggestion? Tritton no longer supports the device.

I had this problem and what I did was: read the user manual. I was actually using the wrong buttons to put the Tri-BC200 on pairing mode. I also boot my I phone. Everything worked OK. Regards.

When attempting to install add-ons, Firefox generates a message saying it is unable to install add-on because Firefox cannot modify the necessary file. To what file is this referring, and how do I fix this problem?

When I download an add-on such as Colorful Tabs and start the installation process, I receive a message that Firefox cannot install the add-on because it cannot modify the necessary file. To what file is this referring?

That is usually caused by Firefox not unpacking the extension.
You can try to set the Boolean pref extensions.alwaysUnpack to true on the about:config page.
To open the about:config page, type about:config in the location (address) bar and press the "Enter" key, just like you type the url of a website to open a website. 
If you see a warning then you can confirm that you want to access that page. 
*Use the Filter bar at to top of the about:config page to locate a preference more easily.
*Preferences that have been modified show as bold (user set).
*Preferences can be reset to the default via the right-click context menu if they are user set
*Preferences can be changed via the right-click context menu: Modify (String or Integer) or Toggle (Boolean)

I created my itunes account YEARS ago!! And I can't remember the answers to my security questions? Because I cannot remember the answers I cannot make purchases in the app store. Please help me create new security questions.

I created my itunes account YEARS ago!! And I can't remember the answers to my security questions? Because I cannot remember the answers I cannot make purchases in the app store. Please help me create new security questions. Please help me.

If you have a rescue email address (which is not the same thing as an alternate email address) set up on your account then you can try going to https://appleid.apple.com/and click 'Manage your Apple ID' on the right-hand side of that page and log into your account. Then click on 'Password and Security' on the left-hand side of that page and on the right-hand side you might see an option to send security question reset info to your rescue email address.
If you don't have a rescue email address (you won't be able to add one until you can answer 2 of your questions) then see if this user tip helps you get the questions reset :https://discussions.apple.com/docs/DOC-4551
e.g. you can try contacting iTunes Support :http://www.apple.com/support/itunes/contact/ - click on Contact iTunes Store Support on the right-hand side of the page, then Account Management , and then try Apple ID Account Security
or try ringing the number for Apple in your country and ask to talk to the Account Security Team : http://support.apple.com/kb/HE57

I cannt install erail.in. note is"erail pluginfor firefox could not be installed because firefox cannot modify the needed file". what should i do now

when i go to www.erail.net for train details. message as"click here to install plugin" displayed and clicked for install then the message "erail plugin for firefox could not be installed because firefox cannot modify the needed file"
so, further what should i do
regards. madhu

You usually get this error if you try to install an extension that needs to be unpacked to work properly. 
Current Firefox version do not unpack an extension automatically, but rename the xpi file to the extension's GUID.
An extension that needs to be unpacked should have an unpack flag in its install.rdf file
<pre><nowiki><em:unpack>true</em:unpack></nowiki></pre>
*https://developer.mozilla.org/En/Updating_extensions_for_Firefox_4.0#XPI_unpacking
You can try to set the extensions.alwaysUnpack pref to true on the about:config page.
The extension seems to install, but I haven't tested if it works.
*https://addons.mozilla.org/firefox/addon/erail-plugin-for-firefox/

After upgrading to Maverick, when I double click on the attchment I get this message "...could not be saved, because you cannot change the contents of that fold

After upgrading to Maverick, when I double click on the attachment I get this message "...could not be saved, because you cannot change the contents of that folder. Change the folder properties and try again, or try saving in a different location." It happens for all types of files.
Any suggestions as how to fix this?
I'm on a Mac OS X 10.9.3 with Thunderbird 24.5.0

Thunderbird > preferences (I think on a mac) and under attachments set the folder

So I bought an iphone 4 from ebay and when I got it it was already signed into an icloud account. When I contacted the seller he said he would try to get the password but i haven't heard from him. How can I sign out of her icloud w/out the password

So I bought an iphone 4 from ebay and when I got it it was already signed into an icloud account. When I contacted the seller he said he would try to get the password but i haven't heard from him. How can I sign out of her icloud w/out having to have the last users password

Bmscotr5 wrote:
How can I sign out of her icloud w/out having to have the last users password
You cannot.
Removing a device from a previous owner’s account
Try and get a Refund.

Firefox crashes whenever i want to install any addon or download any file. Some times i am receiving error while downloading any file like "could not be saved, because you cannot change the contents of that folder"

I am the user of latest firefox 3.6.6 browser. I am getting problems of frequent crashes whenever i tries to install any addon. The crashes also occures whenever i want to download any file.
I am also receiving errors while downloading any file like:
"C:\Users\****\AppData\Local\Temp\******.001.part could not be saved, because you cannot change the contents of that folder.
Change the folder properties and try again, or try saving in a different location. I already changed it many many times but still the same problem."
Adobe flash palyer is also giving problems of not responding. I am using updated version of it already. Java is also updated.
I already uninstalled firefox compeletly and re installed it many many times but still the same problem. I also scanned my computer with avira and malware bytes' Anti malware and got no dection. Please ractify this problem ASAP lest my profession will suffer.
== Crash ID(s) ==
b7f518f2-8d86-41ca-8bab-aee632100709; 1d790e10-d8eb-4904-98c9-94bc62100708; f042d319-b9f8-42ed-a8cb-57c7d2100708

Please help.
It is getting worse
Adobe flash player is crashing. I already uninstalled and re installed the latest ver. Also it is hanging randomly.
Please help.

Error: "FT DeepDark 11.3.1 could not be installed because Firefox cannot modify the needed file." What does this mean?

In an earlier version (Firefox v.31) on this, and (presently) on two other PC's, I was/am able to run add-on FT DeepDark 11.3.1 without any problems. It was only recently - after updating to v.32.0.3 on this PC that this situation started. The PC in question is a Dell Dimension 8400 Intel P4 running Windows 7, though I'm thinking it may have something to do with the newer version of Firefox. Could anyone help me with this? I like this add-on because it is easier in my eyes when browsing the internet. Thanks
PS: Attempted to install the troubleshooter, and again I received a similar error: "Troubleshooter could not be installed because Firefox cannot modify the needed file."

This error has been reported before in this bug:
https://bugzilla.mozilla.org/show_bug.cgi?id=730040#c21
Please read that bug I linked you to and let me know if the last comment in the bug solves your problem. Apparently the problem is about the addon .xpi file being read-only. Try right-clicking it, going to Properties and unchecking the "Read-only" attribute box at the bottom of the dialog. Click Apply, then OK.

What would make a PC decide that an SBS self-signed root certificate is revoked because it cannot contact the CRL distribution point?

Similar Messages

Maybe you are looking for