确保自签名证书与站点URL匹配。如果不这样做，即使在Internet Explorer 8中显式地信任该证书之后，您也将继续得到证书错误(我没有Internet Explorer 7，但Firefox将不管URL不匹配都信任该证书)。

如果这是问题，Internet Explorer 8中的红色“证书错误”框将在您添加证书后显示“不匹配的地址”作为错误。此外，“查看证书”有一个颁发给:标签，显示证书针对哪个URL有效。

您可以使用GPO在域内使用证书。

但我的问题是Internet Explorer 8，即使证书在受信任的根证书存储中…它仍然不会说它是一个可信的网站。

有了这个和司机的签字，现在需要完成…我开始怀疑谁拥有我的电脑了!

我让它这样工作

Start Internet Explorer running as a user with administrative privileges. Browse to server computer using the computer name (ignore certificate warnings) Click the ”Certificate Error” text in the top of the screen and select ”View certificates” In the Certificate dialog, click Install Certificate -> Next Select Place all certificates in the following store -> Browse Check Show Physical Stores check box Select Trusted Root Certificate Authorities – Local Computer Click OK – Next – Finish – OK Restart Internet Explorer

正如其他人所提到的，第一个任务是将证书添加到受信任的根颁发机构。

有一个自定义的exe (self .exe)，它将创建一个证书，并允许您指定颁发给:值(URL)。 这意味着Internet explorer将使用自定义内部网url验证发送给url的内容。

确保重新启动Internet Explorer以刷新更改。

伙计，今天我花了几个小时来解决这个问题。无论我在IE 8中做了什么，问题仍然存在。IE安装的证书出现在客户端PC的“受信任的根证书颁发机构”中，但IE仍然报错。

以下是我发现的解决方案:

在web服务器上:

Win+R, MMC，回车。 文件，添加-删除管理单元，证书，添加，管理证书:我的用户帐户， 完成。 导航到“证书-当前用户/受信任的根证书颁发机构/证书”。 找到您的证书，右键单击All tasks / Export。 不，不要导出私钥 "DER编码二进制X.509 (.CER)" 将文件保存在某个地方。 将新创建的. cer文件传输到客户端PC上。

在客户端机器上:

Win+R, MMC, Enter. File, Add-Remove snap-in, Certificates, Add, Manage certificates for: my user account, Finish, OK. Navigate to "Certificates - current user / Trusted Root Certification Authorities / Certificates". Right-click on Certificates container, All tasks / Import Choose your .CER file you've transferred from the server machine. On the next screen, choose "Place all certificates in the following store", click "Browse", check "Show physical stores", then choose "Trusted Root Certification Authorities / Local Computer". Press "Finish" finally. In Internet Explorer: Tools - Delete browsing History, In Internet Explorer: Tools - Internet options - "Content" tab - Clear SSL state button.

下面是我如何让它在IE8中工作的:

Go to the website in question, https://xxx.yyy.com, for instance, Click through until you get to the Certificate error in the browser status line. View the cert, then from the Details tab, select Copy to File. Save to the desktop as xxx.cer, for example, Start, Run, MMC. File, Add/Remove Snap-In, Select Certificates, Click Add, My User Account, then Finish, then OK, Dig down to Trust Root Certification Authorities, Certificates, Right-Click Certificate, Select All Tasks, Import, Select the Save Cert from the Desktop Select Place all Certificates in the following Store, Click Browse, Check the Box that says Show Physical Stores, Expand out Trusted Root Certification Authorities, and select Local Computer there, click OK, Complete the Import, Check the list to make sure it shows up. You will probably need to Refresh before you see it. Exit MMC, Open Browser, select Tools, Delete Browsing History Select all but Inprivate Filtering Data, complete, Go to Internet Options, Content Tab, Clear SSL State, Close browser and reopen and test.