FIX: You cannot open a secure site in Internet Explorer on a Windows CE 5.0-based device

You connect to a secure site by using Microsoft Internet Explorer on a Windows CE 5.0-based device. After you click Yes on the Security Alert dialog box to accept the security certificate of the site, the secure site does not open. Instead, you receive the following message:Note This problem does not occur on a Windows Embedded CE 6.0-based device.

This problem occurs because the Crypt32.dll file does not handle the PolicyConstraints attribute in the certificate correctly. Therefore, a certificate that has this attribute cannot be processed.

Software update information

A supported software update is now available from Microsoft as Windows CE 5.0 Platform Builder Monthly Update (September 2008). You can confirm this by scrolling to the "File information" section of this article. The package file name contains the product version, date, Knowledge Base article number, and processor type. The package file name format is:For example: Wincepb50-060503-kb917590-armv4i.msi is the ARMV4i Windows CE 5.0 Platform Builder fix that is documented in KB article 917590 and that is contained in the May 2006 monthly update. To resolve this problem immediately, click the following article number for information about obtaining Windows CE Platform Builder and core operating system software updates:

Prerequisites

This update is supported only if all previously issued updates for this product have also been installed.

Restart requirement

After you apply this software update, you must perform a clean build of the whole platform. To do this, use one of the following methods:

• On the Build OS menu, make sure that the following options are selected, and then click Sysgen:
  • Clean Before Building
  • Copy Files to Release Directory After Build
  • Make Run-Time Image After Build
• On the Build OS menu, click Open Release Directory. Then, at a command prompt, type blddemo clean -q, and then press ENTER.

You do not have to restart the computer after you apply this software update.

Update replacement information

This update does not replace any other updates.

File information

The English version of this software update package has the file attributes or the later file attributes that are listed in the following table.



The English version of this software update package has the file attributes (or later file attributes) that are listed in the following table. The dates and times for these files are listed in Coordinated Universal Time (UTC). When you view the file information, it is converted to local time. To find the difference between UTC and local time, use the Time Zone tab in the Date and Time item in Control Panel.

To word around this problem, follow these steps:

1. In Internet Explorer, click Internet Options on the Tools menu.
2. Click the Advanced tab, click to select the Use SSL 2.0 check box, and then clear the Use TLS 1.0 check box and the Use SSL 3.0 check box.
3. Close Internet Explorer, and then restart it.

Microsoft has confirmed that this is a problem in the Microsoft products that are listed in the "Applies to" section.

For more information about software update terminology, click the following article number to view the article in the Microsoft Knowledge Base: