我们在内部网中使用自签名证书。我需要做什么才能让ie8接受它们而不向用户显示错误消息?我们为ie7所做的工作显然不起作用。

编辑:如果我将证书放入受信任的根证书颁发机构,Internet Explorer 7将不会显示任何错误。即使有证书,ie8似乎也会显示错误。


当前回答

我让它这样工作

Start Internet Explorer running as a user with administrative privileges. Browse to server computer using the computer name (ignore certificate warnings) Click the ”Certificate Error” text in the top of the screen and select ”View certificates” In the Certificate dialog, click Install Certificate -> Next Select Place all certificates in the following store -> Browse Check Show Physical Stores check box Select Trusted Root Certificate Authorities – Local Computer Click OK – Next – Finish – OK Restart Internet Explorer

其他回答

我尝试了很多很多的步骤,不同的人张贴在不同的网站上。 但是没有人提到我应该将证书添加到Trusted People密钥库中。

没错,把它放在受信任的CA下对我来说是不够的,我还必须把证书放在受信任的人里面。

这就是:

MMC运行 添加证书管理单元,选择“本地计算机” 展开证书(本地计算机)->受信任人员->证书 右键单击所有任务->导入 完成向导

导出证书。

以管理员身份运行IE(右键单击,以管理员身份运行) 当提示证书无效时,继续访问该网站 点击证书错误地址附近,点击查看证书 转到详细信息页签,单击复制到文件 保存为*。cer文件。

我用的是IE9和Windows 7

下面是我如何让它在IE8中工作的:

Go to the website in question, https://xxx.yyy.com, for instance, Click through until you get to the Certificate error in the browser status line. View the cert, then from the Details tab, select Copy to File. Save to the desktop as xxx.cer, for example, Start, Run, MMC. File, Add/Remove Snap-In, Select Certificates, Click Add, My User Account, then Finish, then OK, Dig down to Trust Root Certification Authorities, Certificates, Right-Click Certificate, Select All Tasks, Import, Select the Save Cert from the Desktop Select Place all Certificates in the following Store, Click Browse, Check the Box that says Show Physical Stores, Expand out Trusted Root Certification Authorities, and select Local Computer there, click OK, Complete the Import, Check the list to make sure it shows up. You will probably need to Refresh before you see it. Exit MMC, Open Browser, select Tools, Delete Browsing History Select all but Inprivate Filtering Data, complete, Go to Internet Options, Content Tab, Clear SSL State, Close browser and reopen and test.

您可以使用CertMgr将证书添加为受信任的发行者,如果是自签名的,则添加为根证书

CertMgr.exe /add CertificateFileName.cer /s /r localMachine root

请参阅微软的文档:

https://learn.microsoft.com/en-us/windows-hardware/drivers/install/using-certmgr-to-install-test-certificates-on-a-test-computer

我让它这样工作

Start Internet Explorer running as a user with administrative privileges. Browse to server computer using the computer name (ignore certificate warnings) Click the ”Certificate Error” text in the top of the screen and select ”View certificates” In the Certificate dialog, click Install Certificate -> Next Select Place all certificates in the following store -> Browse Check Show Physical Stores check box Select Trusted Root Certificate Authorities – Local Computer Click OK – Next – Finish – OK Restart Internet Explorer

这可能会帮助一些人,我在IE11 windows 7和我所做的除了安装证书是去互联网选项==> advance标签==>安全==>“删除检查”从警告证书地址不匹配除了下面-别忘了关闭所有IE实例并重新启动-完成后:

1 .启动ie浏览器。

2 .使用计算机名浏览服务器计算机(忽略证书警告)

3-点击屏幕上方“Certificate Error”文本,选择“View certificates”

4在“证书”对话框中,单击“安装证书->下一步”

5勾选“将所有证书放入下列存储”->浏览

6 .安装到受信任的根证书。

然后重新启动。

希望这能帮助到一些人。