Industry guru Dave Taylor answers free tech support questions about a wide variety of business and technical topics, including blogging, Google AdSense, MySpace, Sony PSP, Apple iPod, Mp3 players, management, Linux, SEO, Mac OS X, Facebook, Twitter, LinkedIn and Microsoft Windows.

How do I tell Internet Explorer to trust a security certificate?

Dave, I was hoping you could help on this really security alert that keeps on coming up every time I go on the Internet. The alert states the following:

Information you exchange with this site cannot be viewed or changed by others. However, there is a problem with the site's security certificate. The security certificate was issued by a company you have chosen not to trust. View the certificate to determine whether you want to trust the certifying authority. The certificate is valid and the security certificate has a valid name matching the name of the page you are trying to view.

I would be very grateful if you could help stop this security alert from appearing in future.


Dave's Answer:

Unfortunately, you didn't give me two critical snippets of information in your question: your operating system and what Web browser you're using, but I somehow suspect that it's Internet Explorer on Windows anyway, so let me answer for that configuration and see if helps you out...

Certificates are supposed to prove that you're connecting to the site you think you're connecting to, something that's particularly important if you're about to share sensitive data with the site or download a program or system patch. I won't even talk about phishing and how that ups the ante of site verification (though you can read about it here: Paypal and eBay alerts: legit or phishing?)

Since having a site certify itself doesn't make sense -- because the site could just as easily have a forged security certificate -- there are third party Certification Authorities that act as what security folk call 'trusted third parties'. It used to be that there were just two or three of these authorities, but now there are more, and what's happened in your situation is that you've somehow ended up indicating to your Web browser, Internet Explorer, that you don't trust the third party certification authority that a particular site is using.

But don't panic. This can be fixed and pretty easily at that. Go into Internet Explorer then choose Tools -> Internet Options, then click on the Content tab. The middle of that window will show you different options regarding Certificates. Click on the middle button, labeled "Certificates..."

Now you'll see something that's an interesting user interface gaffe on Microsoft's part because the tabs on this window don't fit in the window, so you need to click on the tiny right arrow by the rightmost tab. Once you can see it, click on "Untrusted Publishers". You'll end up with a window that looks like this:

Internet Explorer Untrusted Publishers Certificates

You should see the publisher listed that's causing you such problems. On my screen, I have two certificates from Microsoft, published by VeriSign, as you can see. Just delete the entries here by clicking on each one to select it, then clicking "Remove".

Quit the browser, restart, and everything should be good to go!

Important Update: Microsoft has issued a notice explaining that there was an erroneous certificate issued by its certificate authority and that you should not, in fact, delete the certificate as I suggest above. Please go and read this tech note at the Microsoft site before you take any action: Erroneous VeriSign-Issued Digital Certificates Pose Spoofing Hazard.


Help others find this article at Del.icio.us, Digg, Netscape, Reddit, and Simpy.

Subscribe!

Never miss another useful Q&A article again! Subscribe to AskDaveTaylor with Google Reader.

Comments

I'm a little suspicious as to why the browser is hitting something under SSL "up every time I go on the Internet." I can surf the web all day and never encounter an SSL page, let alone the same site. Did the original user happen to bookmark their default home page under SSL? I'd try Dave's suggestion, and also do a little checking on why your browser is visiting that site each session.

Posted by: Stewart Vardaman at January 26, 2005 4:49 PM

Excellent advice, Stewart. Thanks.

Posted by: Dave Taylor at January 26, 2005 4:58 PM

I'm having a similar problem, so I tried to go into Internet Options like you said...only to find that I don't even have an "Untrusted Publishers" tab (and yes I used the arrows to scroll all the way over)! Any suggestions? I'm using Win98SE w/ IE6...

Posted by: Kristine at January 27, 2005 4:17 AM

Another place where you might find this information is in Tools -> Internet Options, then the button Publishers. On my version of Microsoft Internet Explorer (6.0.2900/SP2) I have three tabs on the resultant window: Trusted Root Certification Authorities, Trusted Publishers and Untrusted Publishers.

Posted by: Dave Taylor at January 27, 2005 1:30 PM

I been having this problem with my windows me I tried your method along with other methods to get rid of this problem but still have the message come up, I viewed the certificate and followed those instructions I removed untrusted publishers as you advised but still get the same thing:Information you exchange from this site cannot be viewed or changed by others. However, there is a problem with this sites security certificate. is there something else I can do?

Posted by: laurie at September 9, 2005 1:20 PM

Removing these certificates will not fix the problem described above!

Users should NOT remove the two certificates listed under Untrusted Publishers. These certificates were accidentally issued by a CA to someone claiming to be Microsoft.

MORE INFO:
http://www.infoworld.com/articles/hn/xml/01/03/22/010322hnmicroversign.html
http://www.verisign.com/support/advisories/authenticodefraud.html
http://www.microsoft.com/technet/security/bulletin/MS01-017.mspx

Posted by: Jason Klein at November 8, 2005 9:56 PM

Like Kristine I am on Windows98se / IE6. I too don't have an `Untrusted Publishers' tab. However, following Dave's suggestion of Tools -> Internet Options -> Publishers brings up a window on its' own that is headed `authenticode(tm) Securty Technology'. In that window there are NO tabs at all. Just two lines in a box that is headed `Trusted Publishers and Issuers of Credentials' - can anybody throw any light as to how I find/get rid of untrusted publishers?

Posted by: kevin pearson at December 6, 2005 7:05 PM

This alert " Information you exchange with this site cannot be viewed , ect." will pop up on your internet explorer browser if your system clock is not set properly

Posted by: Carm-Z at January 18, 2006 9:07 PM

Carm-z and his incorrect time in the system clock tip did the job in my case.
Thanks for that!

Posted by: Robbo at February 13, 2006 7:26 PM

yes, the incorrect system time & date worked for me as well. thanks carm-z!

Posted by: anewperson at December 8, 2006 4:59 PM

Dave ... I'm a little confused ... also I am in the transitional phase of searching for a newer computer ... in the meantime I'm using IE v 5.1.7 for Mac and running Mac OS 9.2.2

How do 'Security Certificates' get added to and /or installed onto ones browser?

How do I verify that the certifcates currently listed are actually legitimate, it seems like there are a lot more certificates listed now than when I first installed IE?

Do I WANT new certificates to be issued?

Is it wise to 'reset to defaults' in the security certificates pane, and then set a password?

Posted by: Ohm51 at December 17, 2006 10:09 AM

I think it's irresponsible for Dave to keep this article still up on the web. It is clearly bad advice to remove those two certificates since they fix this problem:
http://www.microsoft.com/technet/security/bulletin/ms01-017.mspx

Posted by: Chris at January 19, 2007 1:39 PM

You're absolutely right, Chris. I have updated my article to encourage people to go and read that tech note from Microsoft. Thanks for the tip!

Posted by: Dave Taylor at January 19, 2007 2:22 PM

Kudos on your site.
You helped me stop the security error message.

Posted by: Ron Korn at February 4, 2007 3:26 PM

Meanwhile, how do you get rid of these blasted certificate warnings?

I get about 4 just accessing Ebay. This is a new development because it didn't happen a few days ago. I suspect an 'update'.

Posted by: meditek at February 8, 2007 10:05 AM

"Security Alert - The Security certificate has valid name matching the name of the page you are trying to view"

Why do i get this message when I'm opening the MSN messenger? However, opening my hotmail email account is not a problem, I just can't use msn for chatting.

Thanks for your help,
Gemma

Posted by: gemma at February 26, 2007 1:22 AM

question? what is this .asx means? mostly all the radio guide station on media player i cannot connect or play that particular sites. how do i setup the settings on my media player? can anyone help me on this? thanks

Posted by: drainzer at March 7, 2007 12:33 AM

I'm using Windows Vista Home Premium Edition. I'm getting the security certificate error for Hotmail. I can't check my mail. HELP!

Posted by: Slsamuel at March 30, 2007 3:46 PM

I am having the same problem as the person above - I can't log into yahoo.com to check my email!!! I'm also using Windows Vista (which I didn't install, it came with this new laptop).

Posted by: Grace at May 26, 2007 4:47 PM

Change your system clock to synch with windows.com (it's in the dropdown). That stopped this issue for me, and it's the only thing that did. No permissions alterations, or anything else I tried had any effect.

Posted by: DUNSEL at May 31, 2007 3:45 PM

ONCE REAL WAY TO TELL INTERNET EXPLORER TO TRUST A SECURITY CERTIFICATE (If the site is one that you trust. Like an internal website)....

I kept getting this problem while accessing our HP Printer via our intranet. To fix it, I did the following:

add it to your trusted sites.
Tools > Internet Options > Security tab > Choose "trusted Sites" > click "sites..." button > type in site and click "Add"

Next, set a custom level of security for all trusted sites by choosing "Custom level..." then set "Display Mixed Content" to "Enable" in the "Miscellaneous" section.

Posted by: Kevin at July 2, 2007 6:30 PM

I am on Windows Vista and I cant seem to open my Hotmail account and my Yahoo mail account because this message always shows up about Certificate Errors:

This organization's certificate has been revoked.

Security certificate problems may indicate an attempt to fool you or intercept any data you send to the server.

Posted by: Cedes at July 17, 2007 9:56 PM

I HAVE TRIED EVERYTHING!!!! AND STILL CAN NOT ACCESS PAY PAL WITHOUT THE "THIS CERTIFICATE HAS BEEN REVOKED" POPPING UP I WAS EVEN AND IDIOT AND DELETED THE MICROSOFT THINGS I APPARENTLY WAS NOT SUPPOSED TO DELETE HELP!!

Posted by: LIZ at September 22, 2007 11:41 AM

So once you delete those to "untrusted" Microsoft certificates, how can you get them back?

Posted by: John at October 1, 2007 9:10 PM

BTW, what fixed my problem with the certificates was fixing the time and date on my computer. The date was somehow inadvertantly changed from 2007 to 2002 so the computer was seeing all of the certificated as expired.

Posted by: John at October 1, 2007 9:14 PM

Yes, also same as above...look at you date and time...mine also read 2002 instead of 2007. This fixed the certificate problem. Thanks for everybody's help!

Posted by: Miranda at October 15, 2007 11:11 AM

setting the clock right worked for me. i am using internet explorer 6.............

Posted by: DEEPAK at October 26, 2007 6:56 AM

I have the same problem. New computer, vista. Windows says that hotmail does not have avalid certificate. The date and time seems not to be the problem. Have looked at the certificate box, as you said, Dave...(this is a spanish version, but has the same features you describe). should i just wipe the whole thing and reinstall windows?

Posted by: Paul Reynolds at October 30, 2007 5:03 AM

OK, after trying everything here and everything I could find through Google...nothing works at my bank or ebay or pay pal.

It is a bug in IE so what do we do. I'd like to kill IE but I'd have to kill my computer too...and I need that. SO the answer is apparently...use firefox?

And bend over for Bill Gates?

Posted by: Don at November 1, 2007 11:42 AM

i am having trouble accesing to orkut.although I
ignored the warnings and created my account on orkut i am unable to finish editing my profile
and whenever I try to see a forum on orkut a page
is displayed telling me to complete my profile so
i am always back to where i started .Can anyone offer a solution to this problem?

Posted by: manish at November 19, 2007 2:02 AM

The date and time setting worked for me. Thanks

Posted by: Sumit at December 10, 2007 11:44 AM

YAAAAY! Thanks for the comments by readers! I, too, was getting a security certificate message that was problematic. Reset the date and time on my computer, and voila! security messages have vanished!

Posted by: maggie at December 11, 2007 8:24 AM

i am having problem with internet explorer
if i try to open orkut it works but after some time its not working

Posted by: yogesh at December 22, 2007 10:05 PM

Hi dave i am having problems accessing my hotmail account when i sign in it just comes up with certificate error: Navigation Blocked

There is a problem with this websites security certificate it is just hotmail every thing else is ok. I tryed your suggestion about content tab but it will not let me remove them. It might be a problem with hotmail what do you think?

Posted by: matt at December 23, 2007 2:38 PM

Hello All,

I have a question about Webmail.

When I users go to access the Webmail, it brings up a 'There is a problem with this website's security certificate.'

My boss has asked me to remove that screen, so all our users see is the Webmail sign in screen only.

Thanks. :-)

Lena

Posted by: Lena at January 11, 2008 12:41 PM

your imformation is very usefull for me thank u

Posted by: behara at January 19, 2008 12:56 AM

READ THIS!! Try installing AVG anti-virus. Even the free version will fix it. If you don't want to do that another alternative is to use Firefox. Both of these worked for me. Hope it helps.

Posted by: LK at February 18, 2008 9:22 PM

Dave, I was hoping you could help on this really security alert that keeps on coming up every time I go on the Internet. The alert states the following:
The current web page is trying to open a site in your trusted sites list. do you want to allow this?
Current site: www.msn.com
Trusted site: about:blank
I would be very grateful if you could help stop this security alert from appearing in future.I had an XP windows

Posted by: hadeer at March 3, 2008 4:27 AM

so Mr. Dave any other possible solution for this
beacuse in my case of IE-6 it is showing to me two warnings :
the name of the certificate is invalid or doesnot match the name of the site

Posted by: tarun at March 12, 2008 6:48 AM

I have any problem about my e-mail adress msn and gmail.Both of them identification always certificates error and navigation eas blocked

Posted by: agustarman at March 14, 2008 11:32 AM

Hiiiiiiiiiii

its great to solve the problem here

i hav asked a question about the error.
it was solved so nicely that now i can work without error

thank you so much......
jas

Posted by: jas at March 18, 2008 7:12 AM

I tried all of the above...no joy... the only way I could do this was to go into the Internet Options, Advanced tab and untick the boxes check for server certificate revocation and the publisher one... unsure how secure ny computer now is but needed to access hotmail account!

Posted by: tc at March 30, 2008 3:23 PM

OMG, I kept getting those "Security Certificate Errors" when trying to access my bank and hotmail sites all it was, was the time on my clock which I changed back for some reason it had a futuristic date.

Posted by: bleon at April 2, 2008 8:52 PM

displed the security certificate has revoked..


what i s the solution

Posted by: suresh at April 7, 2008 11:53 AM

UNBELIEVABLE! The only thing I changed was the date (which for some strange reason it was set in the future) and the silly certificate issue dissapeared.

Posted by: Dan at May 5, 2008 6:40 PM

Was getting 'There is a problem with this website's security certificate' logging into hotmail. How the date changed, I don't know but changing it back solved my problem. Thanks.

Posted by: Cory at June 19, 2008 5:24 PM

I looked for the answer to 10/07/07 from John about once you delete those two "untrusted" Microsoft certificates, how do you get them back, especially being Microsoft said not to delete them. I need an answer ASAP please. Thanks

Posted by: Chris at June 20, 2008 6:44 AM

I have a lot to say, but ...
Starbucks coffee cup I have a lot to say, and questions of my own for that matter, but most of all I'd like to say thank you for all your efforts on this Web site by buying you a chai!

I do have a comment, now that you mention it!









Remember personal info?


Please note that I will never send you any unsolicited commercial email. Ever.

While I'm at it, please note that by submitting a question or comment you're agreeing to my terms of service, which are: you relinquish any subsequent rights of ownership to your material by submitting it on this site.









Uniblue: Free Virus Scan

Search
Find just the answers you seek from among our 1700+ free tech support articles by using our Lijit search engine.


Help!





Subscribe to
Ask Dave Taylor!

Add to Google Reader
Add to My Yahoo!
Subscribe in NewsGator Online

RDF   XML

Free Updates!
Sign up and get free weekly updates and special offers on books, seminars, workshops and more.


Recent Entries
Join the List!
Join my author info mailing list, where you'll learn about my upcoming books, speaking gigs, and more!


Book Links
© 2002 - 2008 by Dave Taylor. All Rights Reserved.

Note: This web site is for the purpose of disseminating information for educational purposes, free of charge, for the benefit of all visitors. We take great care to provide quality information. However, we do not guarantee, and accept no legal liability whatsoever arising from or connected to, the accuracy, reliability, currency or completeness of any material contained on this web site or on any linked site.

[whiteboard marker tray]