Internet Explorer does not display certificate from a signed CAB file (177179)



The information in this article applies to:

  • Microsoft SDK for Java 1.51
  • Microsoft SDK for Java 2.0
  • Microsoft SDK for Java 2.01
  • Microsoft SDK for Java 2.02
  • Microsoft SDK for Java 3.0
  • Microsoft SDK for Java 3.1
  • Microsoft SDK for Java 3.2
  • Microsoft Internet Explorer (Programming) 3.01
  • Microsoft Internet Explorer (Programming) 3.02
  • Microsoft Internet Explorer (Programming) 4.0
  • Microsoft Internet Explorer (Programming) 4.01
  • Microsoft Internet Explorer (Programming) 4.01 SP1
  • Microsoft Internet Explorer (Programming) 4.01 SP2

This article was previously published under Q177179

SUMMARY

There are several scenarios where Internet Explorer does not show a certificate for a signed CAB file. The following section describes those scenarios.

MORE INFORMATION

Here are the three most common reasons for this behavior:
  • If the cab file was signed using a test certificate, you must enable test certificates for the local machine; otherwise, the signature is not considered valid. You can do this by running the Wvtston.reg (SDK for Java 1.5x) or Setreg.exe (SDK for Java 2.0 or later) file included with the code signing kit.
  • You have accepted a software publisher as "always trusted." To verify this, in Internet Explorer, go to view.Options.Security.Publishers to ensure the publisher does not appear in the list box. If so, you can use this dialog box to remove it.
  • If the client machine is running Microsoft Windows NT, the current user must have administrator privileges or have "Full Control" access to the following registry keys (and existing subkeys):
    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Cryptography
    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates
        HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls
        HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\WinTrust
    						
    These privileges can be granted by a user on the machine who has administrator privileges using Regedt32.exe. This requirement will be addressed in future versions of Internet Explorer. NOTE: If the certificate does not appear or you answer "no" to the certificate, the applet will still load but will not be trusted.

REFERENCES

For support information about Visual J++ and the SDK for Java, visit the following Microsoft Web site:

Modification Type:MajorLast Reviewed:6/14/2006
Keywords:kbFAQ kbinfo KB177179