HOWTO: How Do I Enable Test Certificates on a Client Machine?

 Last reviewed: January 29, 1998
Article ID: Q179543
The information in this article applies to:
  • SDK for Java, version 2.0
  • Microsoft Visual J++, versions 1.0, 1.1

SUMMARY

When creating a test certificate using makecert, cert2spc, and signcode to sign a .cab file, it is not always obvious why the client machine running Internet Explorer 3.0 or Internet Explorer 4.0 ignores the signed .cab file. The answer is to use "setreg 1 true" with SDK for Java 2.0x. This will force the client machine to treat the root authority as trusted and therefore allow signed cabfiles, which are signed with test certificates.

MORE INFORMATION

Setreg.exe is a utility program provided with the SDK for Java 2.0x. You will find it in the bin/packsign folder. The root authority (test root) may be set back to untrusted by running "setreg 1 false".

Please see the SDK for Java 2.0x documentation for more information on using makecert, cert2spc and signcode. Setreg.exe replaces the Wvtston.reg utility included with earlier versions of the digital signing tools.

When Internet Explorer encounters a .cab file that is signed with a test certificate on a machine that does not trust the root authority, it may react in several different ways. When downloading an ActiveX Component, Internet Explorer 3.0 displays an error message saying "The component appears to have been digitally signed by its publisher, but the signature cannot be verified." When downloading an applet, Internet Explorer 3.0 presents no dialog box or message; it simply runs the applet in untrusted mode, and the applet generally fails with a security exception.

When Internet Explorer 4.0 encounters any .cab file that is signed with a test certificate on a machine that does not trust the root authority, it displays a warning message, saying that "The authenticity of this content cannot be verified," and that "the test root has not been enabled as a trusted root."

REFERENCES

For more information on the setreg tool, or other tools mentioned in this article, please browse the SDK for Java 2.0x documentation at the following Web site: 

   http://www.microsoft.com/java/sdk/20.
For additional information, please see the following article in the Microsoft Knowledge Base: 

   ARTICLE-ID: Q177179
   TITLE     : INFO: IE Does Not Display Signed CAB File Certificate
For the latest Knowledge Base articles and other support information on Visual J++ and the SDK for Java, see the following page on the Microsoft Technical Support site: 

   http://support.microsoft.com/support/visualj/
   http://support.microsoft.com/support/java/

Additional query words: test certificate

Keywords : JVM
Technology : kbInetDev internet
Version : WINDOWS:1.0,1.1,2.0
Platform : WINDOWS
Issue type : kbhowto

THE INFORMATION PROVIDED IN THE MICROSOFT KNOWLEDGE BASE IS PROVIDED "AS IS" WITHOUT WARRANTY OF ANY KIND. MICROSOFT DISCLAIMS ALL WARRANTIES, EITHER EXPRESS OR IMPLIED, INCLUDING THE WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE. IN NO EVENT SHALL MICROSOFT CORPORATION OR ITS SUPPLIERS BE LIABLE FOR ANY DAMAGES WHATSOEVER INCLUDING DIRECT, INDIRECT, INCIDENTAL, CONSEQUENTIAL, LOSS OF BUSINESS PROFITS OR SPECIAL DAMAGES, EVEN IF MICROSOFT CORPORATION OR ITS SUPPLIERS HAVE BEEN ADVISED OF THE POSSIBILITY OF SUCH DAMAGES. SOME STATES DO NOT ALLOW THE EXCLUSION OR LIMITATION OF LIABILITY FOR CONSEQUENTIAL OR INCIDENTAL DAMAGES SO THE FOREGOING LIMITATION MAY NOT APPLY.

Last reviewed: January 29, 1998
© 1998 Microsoft Corporation. All rights reserved. Terms of Use.