Note: The Internet Explorer 11 desktop application will be retired and go out of support on June 15, 2022 (for a list of what's in scope, see the FAQ). The same IE11 apps and sites you use today can open in Microsoft Edge with Internet Explorer mode. Learn more here.

Support for Windows Vista Service Pack 1 (SP1) ends on July 12, 2011. To continue receiving security updates for Windows, make sure you're running Windows Vista with Service Pack 2 (SP2). For more information, refer to this Microsoft web page: Support is ending for some versions of Windows.

Symptoms

Consider the following scenario:

  • In a network environment, you are running Windows Internet Explorer 7 on a Windows Vista Service Pack 1 (SP1)-based computer or on a Windows Server 2008-based computer.

  • You configure the following Group Policy settings for Internet Explorer:

    • You enable the "Locked-Down Local Machine Zone Template" policy.

    • You disable the "Web sites in less privileged Web content zones can navigate into this zone" policy.

  • You try to visit a Secure Sockets Layer (SSL) Web site by using Internet Explorer 7 on the computer on which you applied these Group Policy settings.

In this scenario, the following certificate error Web page is displayed:

There is a problem with this website's security certificate.

Security certificate problems may indicate an attempt to fool you or intercept any data you send to the server.

We recommend that you close this webpage and do not continue to this website.

Click here to close this webpage.

Continue to this website (not recommended) .

More information

If you arrived at this page by clicking a link, check the website address in the address bar to be sure that it is the address you were expecting. When going to a website with an address such as https://example.com, try adding the 'www' to the address, https://www.example.com. If you choose to ignore this error and continue, do not enter private information into the website. For more information, see "Certificate Errors" in Internet Explorer Help.

After you click Continue to this website (not recommended), nothing happens.

This issue occurs if the SSL Web site that you try to visit is located in a zone that has more restricted permissions than the Internet zone, such as an intranet zone.

Resolution

Windows Vista Service Pack 1 and Windows Server 2008 hotfix information

A supported hotfix is now available from Microsoft. However, it is intended to correct only the problem that is described in this article. Apply it only to systems that are experiencing this specific problem. This hotfix may receive additional testing. Therefore, if you are not severely affected by this problem, we recommend that you wait for the next service pack that contains this hotfix.

To resolve this problem immediately, contact Microsoft Customer Support Services to obtain the hotfix. For a complete list of Microsoft Customer Support Services telephone numbers and information about support costs, visit the following Microsoft Web site:

http://support.microsoft.com/contactus/?ws=support Note In special cases, charges that are ordinarily incurred for support calls may be canceled if a Microsoft Support Professional determines that a specific update will resolve your problem. The usual support costs will apply to additional support questions and issues that do not qualify for the specific update in question.

Important Windows Vista and Windows Server 2008 hotfixes are included in the same packages. However, only one of these products may be listed on the “Hotfix Request” page. To request the hotfix package that applies to both Windows Vista and Windows Server 2008, just select the product that is listed on the page.

Prerequisites

There are no prerequisites.

Restart requirement

You must restart the computer after you apply this hotfix.

Hotfix replacement information

This hotfix does not replace any other hotfixes.

Registry information

Important This section, method, or task contains steps that tell you how to modify the registry. However, serious problems might occur if you modify the registry incorrectly. Therefore, make sure that you follow these steps carefully. For added protection, back up the registry before you modify it. Then, you can restore the registry if a problem occurs. For more information about how to back up and restore the registry, click the following article number to view the article in the Microsoft Knowledge Base:

322756 How to back up and restore the registry in Windows To enable this hotfix after installation, follow these steps:

  1. Click Start, type regeditin the Start Search box, and then press ENTER.

  2. Locate and then click the following registry subkey:

    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Main\FeatureControl

  3. On the Edit menu, point to New, and then click Key.

  4. Type the following key name, and then press ENTER:

    FEATURE_ERROR_PAGE_BYPASS_ZONE_CHECK_FOR_HTTPS_KB954312

  5. On the Edit menu, point to New, and then click DWORD Value.

  6. Type iexplore.exe, and then press ENTER.

  7. On the Edit menu, click Modify.

  8. Type 1, and then click OK.

  9. Exit Registry Editor.

File information


The English version of this hotfix has the file attributes (or later file attributes) that are listed in the following table. The dates and times for these files are listed in Coordinated Universal Time (UTC). When you view the file information, it is converted to local time. To find the difference between UTC and local time, use the Time Zone tab in the Date and Time item in Control Panel.

Windows Vista and Windows Server 2008 file information notes

  • The files that apply to a specific product, milestone (RTM, SPn), and service branch (LDR, GDR) can be identified by examining the file version numbers as shown in the following table.

    Version

    Product

    Milestone

    Service branch

    6.0.600
    0.
    16xxx

    Windows Vista

    RTM

    GDR

    6.0.600
    0.
    20xxx

    Windows Vista

    RTM

    LDR

    6.0.600
    1.
    18xxx

    Windows Vista SP1 and Windows Server 2008 SP1

    SP1

    GDR

    6.0.600
    1.
    22xxx

    Windows Vista SP1 and Windows Server 2008 SP1

    SP1

    LDR

  • Service Pack 1 is integrated into Windows Server 2008.

  • The .manifest and .mum files that are installed for each environment are
    listed separately. The .mum and .manifest files, and the associated security catalog (.cat) files, are critical to maintaining the state of the updated component. The security catalog files (attributes not listed) are signed with a Microsoft digital signature.

For all supported 32-bit versions of Windows Server 2008 and of Windows Vista

File name

File version

File size

Date

Time

Platform

Mshtml.dll

7.0.6001.22221

3,578,880

12-Jul-2008

01:09

x86

Mshtml.tlb

7.0.6001.22221

1,383,424

11-Jul-2008

23:00

Not Applicable

For all supported 64-bit versions of Windows Server 2008 and of Windows Vista

File name

File version

File size

Date

Time

Platform

Mshtml.dll

7.0.6001.22221

5,677,056

12-Jul-2008

01:45

x64

Mshtml.tlb

7.0.6001.22221

1,383,424

11-Jul-2008

23:40

Not Applicable

For all supported Itanium-based versions of Windows Server 2008

File name

File version

File size

Date

Time

Platform

Mshtml.dll

7.0.6001.22221

10,062,848

12-Jul-2008

01:26

IA-64

Mshtml.tlb

7.0.6001.22221

1,383,424

11-Jul-2008

23:25

Not Applicable

References

For more information, click the following article number to view the article in the Microsoft Knowledge Base:

950067 Certificate error Web page is displayed when you try to visit an SSL Web site by using Internet Explorer 7: "There is a problem with this website's security certificate"

More Information

Additional file information for Windows Server 2008 and for Windows Vista

Additional files for all supported 32-bit versions of Windows Server 2008 and of Windows Vista

File name

Package_for_kb954312_client_1~31bf3856ad364e35~x86~~6.0.1.0.mum

File version

Not Applicable

File size

1,367

Date (UTC)

13-Jul-2008

Time (UTC)

18:01

File name

Package_for_kb954312_client~31bf3856ad364e35~x86~~6.0.1.0.mum

File version

Not Applicable

File size

1,430

Date (UTC)

13-Jul-2008

Time (UTC)

18:01

File name

Package_for_kb954312_server_0~31bf3856ad364e35~x86~~6.0.1.0.mum

File version

Not Applicable

File size

1,425

Date (UTC)

13-Jul-2008

Time (UTC)

18:01

File name

Package_for_kb954312_server~31bf3856ad364e35~x86~~6.0.1.0.mum

File version

Not Applicable

File size

1,430

Date (UTC)

13-Jul-2008

Time (UTC)

18:01

File name

X86_3adc02f2cff312dbec75e4532179c27b_31bf3856ad364e35_6.0.6001.22221_none_deec21ec25237bdf.manifest

File version

Not Applicable

File size

704

Date (UTC)

13-Jul-2008

Time (UTC)

18:01

File name

X86_microsoft-windows-ie-htmlrendering_31bf3856ad364e35_6.0.6001.22221_none_13b811bf3b566946.manifest

File version

Not Applicable

File size

840,275

Date (UTC)

12-Jul-2008

Time (UTC)

01:50

Additional files for all supported 64-bit versions of Windows Server 2008 and of Windows Vista

File name

Amd64_acf199e83945a6d58f16fc02d66069f8_31bf3856ad364e35_6.0.6001.22221_none_2f89bf440c71b005.manifest

File version

Not Applicable

File size

1,056

Date (UTC)

13-Jul-2008

Time (UTC)

18:01

File name

Amd64_microsoft-windows-ie-htmlrendering_31bf3856ad364e35_6.0.6001.22221_none_6fd6ad42f3b3da7c.manifest

File version

Not Applicable

File size

840,336

Date (UTC)

12-Jul-2008

Time (UTC)

02:31

File name

Package_for_kb954312_client_1~31bf3856ad364e35~amd64~~6.0.1.0.mum

File version

Not Applicable

File size

1,375

Date (UTC)

13-Jul-2008

Time (UTC)

18:01

File name

Package_for_kb954312_client~31bf3856ad364e35~amd64~~6.0.1.0.mum

File version

Not Applicable

File size

1,438

Date (UTC)

13-Jul-2008

Time (UTC)

18:01

File name

Package_for_kb954312_server_0~31bf3856ad364e35~amd64~~6.0.1.0.mum

File version

Not Applicable

File size

1,433

Date (UTC)

13-Jul-2008

Time (UTC)

18:01

File name

Package_for_kb954312_server~31bf3856ad364e35~amd64~~6.0.1.0.mum

File version

Not Applicable

File size

1,438

Date (UTC)

13-Jul-2008

Time (UTC)

18:01

Additional files for all supported Itanium-based versions of Windows Server 2008

File name

Ia64_10c209d41887ebc4aa225017661c4e8b_31bf3856ad364e35_6.0.6001.22221_none_8cdd02a458895f86.manifest

File version

Not Applicable

File size

1,054

Date (UTC)

13-Jul-2008

Time (UTC)

18:01

File name

Ia64_microsoft-windows-ie-htmlrendering_31bf3856ad364e35_6.0.6001.22221_none_13b9b5b53b547242.manifest

File version

Not Applicable

File size

840,306

Date (UTC)

12-Jul-2008

Time (UTC)

02:00

File name

Package_1_for_kb954312~31bf3856ad364e35~ia64~~6.0.1.0.mum

File version

Not Applicable

File size

2,016

Date (UTC)

13-Jul-2008

Time (UTC)

18:01

File name

Package_for_kb954312_server_0~31bf3856ad364e35~ia64~~6.0.1.0.mum

File version

Not Applicable

File size

1,429

Date (UTC)

13-Jul-2008

Time (UTC)

18:01

File name

Package_for_kb954312_server~31bf3856ad364e35~ia64~~6.0.1.0.mum

File version

Not Applicable

File size

1,434

Date (UTC)

13-Jul-2008

Time (UTC)

18:01

Need more help?

Expand your skills
Explore Training
Get new features first
Join Microsoft Insiders

Was this information helpful?

What affected your experience?

Thank you for your feedback!

×