3

We have a problem with a specific website which our staff need to access via Internet Explorer on our Citrix server (running Win2K3).

When connecting via SSL (a requirement), the site is inaccessible because the certificate issuer's certificate is not in the Trusted Root Certification Authorities.

If I manually import the certificate chain (exported my PC), it works, but I'd rather not do that for each user: Is there a way I can import the certificate for all users?

I found this MS KB article which details importing certificates in to the Local Computer store to resolve a different issue; would that apply here?

Improve this question

2 Answers 2

Reset to default
3

Importing the certificate into the machine's Trusted Root Certificate store will resolve your issue. It's not necessary for the CA to be trusted by each user. If the machine trusts the CA then the users will "inherit" that trust automatically.

The procedure in that KB article is basically correct. Be sure to choose the computer when adding the Certificates snap-in and the "Trusted Root Certificate Authorities" when choosing the store to place the certificate into.

Improve this answer
1
  • Surprisingly, this method did not work. I haven't rebooted the server yet, though; I won't be able to do that for a couple of weeks. If that doesn't resolve it I'll probably try the GPO method as plan B.
    – Chris
    Feb 24, 2012 at 14:50
1

Why not deploy the certificate via Group Policy? This link can guide you on how to do this.

Improve this answer

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .