You cannot view certificate information in Windows Internet Explorer 7 or in Certificate Manager after you successfully import a certificate on a Windows Vista-based computer

Article translations Article translations
Article ID: 932156 - View products that this article applies to.
Expand all | Collapse all

On This Page

SYMPTOMS

After you successfully import a certificate on a Windows Vista-based computer, you cannot view the certificate information in Windows Internet Explorer 7 or in Certificate Manager.

CAUSE

This problem occurs if you do not have Read permissions for the following registry subkey:
HKEY_CURRENT_USER\Software\Microsoft\SystemCertificates\Root\ProtectedRoots

RESOLUTION

Download information

The following files are available for download from the Microsoft Download Center:

Update for Windows Vista
Collapse this imageExpand this image
Download
Download the Update for Windows Vista (KB932156) package now.

Update for Windows Vista for x64-based Systems
Collapse this imageExpand this image
Download
Download the Update for Windows Vista for x64-based Systems (KB932156) package now.

Note After you apply the update to the computer, locate the Portreg.exe file in the following path:
<drive>:\Program Files\Microsoft Corporation\Microsoft Update ProtectedRoots registry key tool (KB932156)
To enable this hotfix, double-click the Portreg.exe file.

For more information about how to download Microsoft support files, click the following article number to view the article in the Microsoft Knowledge Base:
119591 How to obtain Microsoft support files from online services
Microsoft scanned this file for viruses. Microsoft used the most current virus-detection software that was available on the date that the file was posted. The file is stored on security-enhanced servers that help prevent any unauthorized changes to the file.

For more information about how to resolve this problem, click the following article number to view the article in the Microsoft Knowledge Base:
942543 You cannot view certificate information in Windows Internet Explorer 7 or in Certificate Manager if you use an unattended answer file to install Windows Vista

How to resolve this problem by modifying the registry

Important This section, method, or task contains steps that tell you how to modify the registry. However, serious problems might occur if you modify the registry incorrectly. Therefore, make sure that you follow these steps carefully. For added protection, back up the registry before you modify it. Then, you can restore the registry if a problem occurs. For more information about how to back up and restore the registry, click the following article number to view the article in the Microsoft Knowledge Base:
322756 How to back up and restore the registry in Windows


To resolve this problem, assign Read permissions for the
ProtectedRoots
registry key to the user who is currently logged on to the computer. To do this, follow these steps:
  1. Click Start
    Collapse this imageExpand this image
     Start button
    , type regedit in the Start Search box, and then click regedit.exe in the Programs list.

    Collapse this imageExpand this image
     User Account Control permission
    If you are prompted for an administrator password or for confirmation, type your password, or click Continue.
  2. Locate and then right-click the following registry subkey:
    HKEY_CURRENT_USER\Software\Microsoft\SystemCertificates\Root\ProtectedRoots
  3. Click Permissions.
  4. Use one of the following methods:
    • If the user who is currently logged on to the computer is listed in the Group or user names box, click the user's name, click to select the Read check box in the Allow column, and then click OK.
    • If the user who is currently logged on to the computer is not listed in the Group or user names box, follow these steps:
      1. Click Add.
      2. Type the name of the user who is currently logged on to the computer, and then click OK.
      3. In the Group or user names box, select the user name, click to select the Read check box in the Allow column, and then click OK.
  5. Exit Registry Editor.
Note If a domain user is logged on by using cached credentials and is not connected to the domain, the domain user will be unable to add permissions for their domain user account to the registry key in these steps. You must log on to the local computer and add the local user's account to the permissions for the registry key. You can then successfully install the certificate.

STATUS

Microsoft has confirmed that this is a problem in the Microsoft products that are listed in the "Applies to" section.

Properties

Article ID: 932156 - Last Review: November 19, 2008 - Revision: 5.1
APPLIES TO
  • Windows Vista Business
  • Windows Vista Enterprise
  • Windows Vista Home Basic
  • Windows Vista Home Premium
  • Windows Vista Ultimate
Keywords: 
kbharmony kbbug kbexpertiseinter kbexpertisebeginner kbtshoot KB932156

Give Feedback

 

Contact us for more help

Contact us for more help
Connect with Answer Desk for expert help.
Get more support from smallbusiness.support.microsoft.com