University of Essex Homepage Computing Service - Go to Home Page
. . . .
CONTENTS A-Z   |   SEARCH   |   CHANGE YOUR PASSWORD  |  ANNOUNCEMENTS  |  STATUS MESSAGES
. . . .

What to do if you see a warning about the security certificate when opening a University of Essex web page.

Some people with older versions of Internet Explorer or a browser such as Opera may find that they get a warning when attempting to view secure web pages on some Essex web servers (www2 and courses at present) on which we are using a new certification authority. It is liable to say "The security certificate was issued by a company you have not chosen to trust." This email tells you what to do about that, with Internet Explorer, Netscape and Opera.

With Internet Explorer  you are able to proceed past the warning:  but do not choose the button which says install certificate. Instead, use the browser to go to:

http://secure.globalsign.net/cacert/root.crt

 you will get a dialogue box which says:

"You have chosen to download a file from this location root.cer from secure.globalsign.net
What would you like to do with this file?
Open this file from its current location
Save this file to disk"

choose:

"Open this file from its current location"

You will then get a panel which says:

"Certificate.This CA Root certificate is not trusted. To enable trust, install this certificate into the trusted Root Certification Authorities store"

Click on 'install certificate'. You will then see

"Welcome to the Certification Manager import Wizard"

Click on Next. You will then see

"Select a certificate store
automatically select the certification store based on the type of certificate" you are recommended to choose this, or if you choose
"Place all certificates into the following store" - click browse and select "Trusted Root certification authorities"

click Next. You will then see

"Completing the Certification manager import wizard
You have successfully completed, etc."

click Finish. You will then see

"Do you want to ADD the following certificate to the Root Store? Subject: Globalsign Root CA, Root CA etc" 

click yes or OK. You should then see -

"The import was successful" - click OK

The original screen saying the CA Root certificate is not trusted is still visible and must be closed. But after this you should always be able to view secure web pages on Essex servers without being held up by a warning.

Netscape, when you attempt to access a secure page,  offers you a screen saying "new site certificate". If you click "next" it tells you the certificate is signed by GlobalSign. Click "next" again and choose the option "Accept this certificate forever (until it expires)". Next, you have the option of asking Netscape to warn you whenever you send information to the site, which can be left unticked. Click "next" and then "Finish".

Opera will allow you to install http://secure.globalsign.net/cacert/root.crt with one click. 

 

The person responsible for the content of this page is Les Bell.

 

. . . .