Share via

Microsoft Internal CA Issues certificate not getting trusted on

FARI FARIS 31 Reputation points
2022-09-24T09:46:21.64+00:00

Hello Forum Members,
Good Day,

I have implemented Internal Microsoft CA server and issued certificate to our internal web server by having CSR from the server, we noticed that the web server getting trusted and secure pad lock in the IE Browsers only. All other browsers prompting https error, I have tried below.

  1. Imported the Root CA and subjected certificate to all computers and to the browsers
  2. Since the Computers are in Domain network, pushed the root CA via group policy.

However the Certificate still on the same error on all other browser's, how can we fix the problem to have trusted on all the browsers to utilize the internal CA

Internal CA Server : Windows Server 2012,

Appreciated any expert advise.
Thank you.

Windows for business | Windows Server | Devices and deployment | Configure application groups
Microsoft Security | Microsoft Authenticator

4 answers

Sort by: Most helpful
Most helpful Newest Oldest
  1. Limitless Technology 45,231 Reputation points
    2022-09-27T09:01:13.097+00:00

    Hello there,

    This message usually presents when you are using an SSL certificate that has not been issued by a known Root CA.

    What can happen in the scenario you are experiencing is usually caused by one of the following:

    1. Your SSL certificate was signed/authorized by a Root CA that your browser does not recognize
    2. Your SSL certificate is a self-signed certificate, which is mainly used in testing and not recommended in production environments.

    This article provides a workaround for an issue where valid root CA certificates that are distributed by using GPO appear as untrusted https://learn.microsoft.com/en-us/troubleshoot/windows-server/identity/valid-root-ca-certificates-untrusted

    ---------------------------------------------------------------------------------------------------------------------------------

    --If the reply is helpful, please Upvote and Accept it as an answer--

    Was this answer helpful?

    0 comments
  2. JimmySalian-2011 45,236 Reputation points Volunteer Moderator
    2022-09-24T17:07:14.657+00:00

    Hi,

    Does the CN name matches your WebURL? as in URL is supportdemo.contoso.com and in the certificate the CN is set to supportdemo.contoso.com?

    Can you provide the other browser details that is not working version details.

    Thanks.

    Was this answer helpful?

    0 comments
  3. FARI FARIS 31 Reputation points
    2022-09-24T14:03:30.797+00:00

    244512-screenshot-2022-09-24-170213.pngHI

    Many thanks for your reply. attached the screen shot,

    Note. Hide the domain for security244420-screenshot-2022-09-24-165121.png244521-screenshot-2022-09-24-165243.png reason

    Was this answer helpful?

  4. JimmySalian-2011 45,236 Reputation points Volunteer Moderator
    2022-09-24T10:11:43.567+00:00

    Hi,

    When you click the http error what is the message you get on the screen? Please provide that error or screenshot.

    Was this answer helpful?

    0 comments

Your answer

Answers can be marked as 'Accepted' by the question author and 'Recommended' by moderators, which helps users know the answer solved the author's problem.