|
Posted by Brian Komar [MVP] on November 1, 2006, 5:28 pm
Please log in for more thread options
prasen67@yahoo.com says...
> I order to use SSL with web services I need to open the SSL connection
> in IE without any dialogs or warnings. A web service can not ask the
> user to accept the certificate that's why it fails to open the
> connection and I get this error ""Could not establish secure channel
> for SSL/TLS"
>
> We have created/issued our own Certificate and installed it under
> Trusted Root CAs.
>
> Even though I install the certificate correctly each time, I am always
> prompted to trust the certificate each time I browse to the Orders Web
> Service.
>
> So we don't have implicit trust.
>
> How can we issue a certificate and install it so Windows 2003 will
> trust it implicity (i.e. the SSL connection in IE without any dialogs
> or warnings)?
>
> Thanks in advance!
>
>
A couple of solutions are possible:
1) Create a GPO that adds your root certificate to the Trusted Root
Authorities GPO.
2) Publish the certificate into AD so it is trusted by all Windows 2000,
Windows XP, and WIndows 2k3 clients in the forest.
certutil -dspublish -f <rootcert.cer> RootCA
Brian
| 
XML Sitemap