You cannot view certificate information in Windows Internet Explorer 7 or in Certificate Manager after you successfully import a certificate on a Windows Vista-based computer

After you successfully import a certificate on a Windows Vista-based computer, you cannot view the certificate information in Windows Internet Explorer 7 or in Certificate Manager.

This problem occurs if you do not have Read permissions for the following registry subkey:

Download information

The following files are available for download from the Microsoft Download Center:

Update for Windows Vista
Download the Update for Windows Vista (KB932156) package now. (http://www.microsoft.com/downloads/details.aspx?FamilyId=7A0FF471-ACE1-4B82-8CD8-1529B9B03AEF)

Update for Windows Vista for x64-based Systems
Download the Update for Windows Vista for x64-based Systems (KB932156) package now. (http://www.microsoft.com/downloads/details.aspx?FamilyId=49CD3BDD-2B60-4480-86C3-3D0658F6704D)

Note After you apply the update to the computer, locate the Portreg.exe file in the following path: To enable this hotfix, double-click the Portreg.exe file.

For more information about how to download Microsoft support files, click the following article number to view the article in the Microsoft Knowledge Base: Microsoft scanned this file for viruses. Microsoft used the most current virus-detection software that was available on the date that the file was posted. The file is stored on security-enhanced servers that help prevent any unauthorized changes to the file.

For more information about how to resolve this problem, click the following article number to view the article in the Microsoft Knowledge Base:

How to resolve this problem by modifying the registry

Important This section, method, or task contains steps that tell you how to modify the registry. However, serious problems might occur if you modify the registry incorrectly. Therefore, make sure that you follow these steps carefully. For added protection, back up the registry before you modify it. Then, you can restore the registry if a problem occurs. For more information about how to back up and restore the registry, click the following article number to view the article in the Microsoft Knowledge Base:

To resolve this problem, assign Read permissions for the ProtectedRoots registry key to the user who is currently logged on to the computer. To do this, follow these steps:

1. Click Start
   Collapse this imageExpand this image

   
   , type regedit in the Start Search box, and then click regedit.exe in the Programs list.
   
   
   Collapse this imageExpand this image

   
   If you are prompted for an administrator password or for confirmation, type your password, or click Continue.
2. Locate and then right-click the following registry subkey:
   HKEY_CURRENT_USER\Software\Microsoft\SystemCertificates\Root\ProtectedRoots
3. Click Permissions.
4. Use one of the following methods:
   • If the user who is currently logged on to the computer is listed in the Group or user names box, click the user's name, click to select the Read check box in the Allow column, and then click OK.
   • If the user who is currently logged on to the computer is not listed in the Group or user names box, follow these steps:
     1. Click Add.
     2. Type the name of the user who is currently logged on to the computer, and then click OK.
     3. In the Group or user names box, select the user name, click to select the Read check box in the Allow column, and then click OK.
5. Exit Registry Editor.

Note If a domain user is logged on by using cached credentials and is not connected to the domain, the domain user will be unable to add permissions for their domain user account to the registry key in these steps. You must log on to the local computer and add the local user's account to the permissions for the registry key. You can then successfully install the certificate.

Microsoft has confirmed that this is a problem in the Microsoft products that are listed in the "Applies to" section.