FIX: Office XP may fail to open documents from a Web folder that requires client certificates (307560)


The information in this article applies to:

  • Microsoft Office XP Professional with FrontPage
  • Microsoft OLE DB Provider for Internet Publishing 2.0
This article was previously published under Q307560

SYMPTOMS

When you attempt to open an Office document from a remote Web folder by double-clicking the file in Windows Explorer (on Microsoft Windows 2000, the file is listed under My Network Places; on Microsoft Windows 95, Microsoft Windows 98, or Microsoft Windows Millennium Edition (Me), the file is listed under Web Folders), the application may not be able to open the file. This problem occurs when all of the following conditions are met:
  • The server requires Secure Sockets Layer (SSL) and a client certificate for authentication to the Web Folder.
  • The server is using Distributed Authoring and Versioning (DAV) for the publishing protocol, and not FrontPage Server Extensions (FPSE).
  • The client has installed Office XP, which has installed a new version of the OLE DB Provider for Internet Publishing (MSDAIPP).
  • The file in question is being opened by an application on the client that uses URL Moniker binding (URLMON) to open the Web resource (for example, Office 2000 or Office XP).
Note that this problem does not occur if you first copy the file to a local destination.

CAUSE

The problem is caused by a regression in the OLE DB Provider for Internet Publishing (MSDAIPP) that ships with Office XP.

RESOLUTION

To resolve this problem, obtain the latest service pack for Microsoft Office XP. For additional information, click the following article number to view the article in the Microsoft Knowledge Base:

307841 OFFXP: How to Obtain the Latest Office XP Service Pack

The following file is available for download from the Microsoft Download Center:

DownloadDownload Pkmse54.exe now

For additional information about how to download Microsoft Support files, click the following article number to view the article in the Microsoft Knowledge Base:

119591 How to Obtain Microsoft Support Files from Online Services

Microsoft scanned this file for viruses. Microsoft used the most current virus-detection software that was available on the date that the file was posted. The file is stored on security-enhanced servers that help to prevent any unauthorized changes to the file. The English version should have the following file attributes or later: 
    *** Digital Signature from Microsoft Corporation ***
    
   DigSig       Timestamp  Version        Size    File Name     
   -----------------------------------------------------------
   Sep-12-2001  23:28      5.0.2919.6304  371 KB  Pkmse54.exe

STATUS

Microsoft has confirmed that this is a bug in the Microsoft products that are listed at the beginning of this article.
This problem was first corrected in Microsoft Office XP Service Pack 1.

MORE INFORMATION

Steps to Reproduce Behavior

  1. On a Web server that supports both WebDAV and client certificate authentication for SSL, such as Microsoft Windows 2000 Server with Microsoft Internet Information Services (IIS) version 5.0, create a virtual folder that has Read, Write, and Browse access and that requires SSL and client certificates for authentication. Place several Office documents in the folder for testing.For additional information on how to set up client certificates in IIS 5.0, click the article numbers below to view the articles in the Microsoft Knowledge Base:

    228836 Installing a New Certificate for Use in SSL/TLS

    228984 Using Certificate Server 2.0 to Generate a Server Certificate for Use with IIS 5.0

  2. Install a certificate that has been signed by a Certificate Authority that is trusted by the server. If you are using Windows 2000 Server with Certificate Services installed, the client can request an authentication certificate directly from that server by using the certificate server Web site, as follows:

    http://<CA Server Name or IP>/certsrv

    After the certificate has been installed, the client is allowed access to the Web folder.

  3. On the client computer, install Office XP.
  4. In Windows Explorer, from My Network Places (on Windows 2000 or Windows XP) or Web Folders (Windows 98 or Windows Me), click Add Network Place or Add Web Folder to start the wizard.
  5. Complete the wizard by typing the URL to the Web folder (for example, https://<Server Name or IP>/somefolder) and a friendly name. Click Finish to complete the wizard.
  6. If you are prompted to select a client certificate, select the one that is recognized by the server or that is obtained directly from that server if it is running Certificate Services. If you only have one certificate in your personal store, you will not be prompted.
  7. After you are connected, the contents of the folder display. Find an Office document and double-click the item to open it. The associated Office application starts, but displays a dialog box that says that the file cannot be opened. Applications that are not using URLMON can open files from the folder; for example, Windows bitmaps open in Paint without error.
Modification Type:MinorLast Reviewed:3/1/2005
Keywords:kbdownload kbbug kbfix kbOfficeXPsp1Fix kbProvider kbWebFolder KB307560 kbAudDeveloper
©2004 Microsoft Corporation. All rights reserved.