Entrust Certificate Services Support Knowledge Base
Audience: General
Last Modified: 2009-02-24 11:20:38.0
TN 7740 - Why is the Entrust 2048 bit Root Certificate not installed?
Why is the Entrust 2048 bit Root Certificate not installed?
Microsoft Windows XP, Windows Server 2003, and Windows Vista do not include all available root certificates once the Operating System has been installed. The root certificates are obtained through an automatic update done through Windows. During this update operation, Windows will check the list of trusted CAs on the Windows Update Web site. Windows will then obtain and install the root certificate.
Root certificates are updated on Windows Vista automatically. When a user visits a secure Web site (by using HTTPS SSL), reads a secure email (S/MIME), or downloads an ActiveX control that is signed (code signing) and encounters a new root certificate, the Windows certificate chain verification software checks the appropriate Microsoft Update location for the root certificate. If it finds it, it downloads it to the system. To the user, the experience is seamless. The user does not see any security dialog boxes or warnings. The download happens automatically, behind the scenes.
Root certificates are also delivered for Windows XP and earlier via the Microsoft Update Catalog. Visitors to the Catalog can search on “root update” or the KB article for the Root Certificate Program, “KB931125”, and download the latest Root Update package. Root Updates are cumulative, so it should only be necessary to install the latest one to receive all root certificates in the Program.
Enabling Root Certificate Update in Windows Vista
If the root certificate does not appear to be installed, the root update may have been disabled in the Group Policy Settings. In Windows Vista, some of these policy settings can be found in Group Policy under the category named Internet Communication Management. This category can be seen through the Group Policy Object Editor (which can be opened through the Group Policy Management Console). Internet Communication Management is located in two places:
- Computer Configuration\Administrative Templates\System
- User Configuration\Administrative Templates\System\
1 - Expand Computer Configuration, expand Administrative Templates, expand System, expand Internet Communication Management, and then click Internet Communication settings.
2 -In the details pane, double-click Turn off Automatic Root Certificates Update, and then click Disable.
Enabling Root Certificate Update in Windows XP
The automatic Root Update can be used in Windows XP by adding it to the list of Windows Components. To access this list:
- Open the Control Panel
- Double Click Add-Remove Programs
- Click Add-Remove Windows Components
- Select Update Root Certificates and complete the Wizard
References:
-http://technet.microsoft.com/en-us/library/cc749331.aspx
-http://technet.microsoft.com/en-us/library/cc749503.aspx
-http://technet.microsoft.com/en-us/library/bb457160.aspx
-http://support.microsoft.com/kb/931125
-http://technet.microsoft.com/en-ca/library/cc751157.aspx
Affected Products:
- Entrust Certificate Services 1 Year Advantage SSL Certificate Version Not Applicable Language Not Applicable Platform Not Applicable
- Entrust Certificate Services 1 Year Mutual SSL Certificate Version Not Applicable Language Not Applicable Platform Not Applicable
- Entrust Certificate Services 1 Year SSL Certificate Version Not Applicable Language Not Applicable Platform Not Applicable
- Entrust Certificate Services 2 Year Advantage SSL Certificate Version Not Applicable Language Not Applicable Platform Not Applicable
- Entrust Certificate Services 2 Year Mutual SSL Certificate Version Not Applicable Language Not Applicable Platform Not Applicable
- Entrust Certificate Services 2 Year SSL Certificate Version Not Applicable Language Not Applicable Platform Not Applicable
- Entrust Certificate Services 3 Year Advantage SSL Certificate Version Not Applicable Language Not Applicable Platform Not Applicable
- Entrust Certificate Services 3 Year Advantage SSL Version Not Applicable Language Not Applicable Windows
- Entrust Certificate Services 3 Year SSL Certificate Version Not Applicable Language Not Applicable Platform Not Applicable
- Entrust Certificate Services 4 Year Advantage SSL Certifcate Version Not Applicable Language Not Applicable Platform Not Applicable
- Entrust Certificate Services Accelerator Licenses Version Not Applicable Language Not Applicable Platform Not Applicable
- Entrust Certificate Services Additional Administrator Version Not Applicable Language Not Applicable Platform Not Applicable
- Entrust Certificate Services Additional Client Organization and Domain Names Version Not Applicable Language Not Applicable Platform Not Applicable
- Entrust Certificate Services Additional Domain Names Version Not Applicable Language Not Applicable Platform Not Applicable
- Entrust Certificate Services Additional Organization Names Version Not Applicable Language Not Applicable Platform Not Applicable
- Entrust Certificate Services Additional SANs for UCC Version Not Applicable Language Not Applicable Platform Not Applicable
- Entrust Certificate Services Advantage Certificates Version Not Applicable Language Not Applicable Platform Not Applicable
- Entrust Certificate Services Affiliate Operations Module for SSL Version Not Applicable Language Not Applicable Platform Not Applicable
- Entrust Certificate Services Affiliate Partner Program Fee Version Not Applicable Language Not Applicable Platform Not Applicable
- Entrust Certificate Services Affiliate Partner Royalty Fees Version Not Applicable Language Not Applicable Platform Not Applicable
- Entrust Certificate Services Cert Admin Advantage Server Certificate 1 Year Version Not Applicable Language Not Applicable Platform Not Applicable
- Entrust Certificate Services Cert Admin Advantage Server Certificate 2 Year Version Not Applicable Language Not Applicable Platform Not Applicable
- Entrust Certificate Services Cert Admin UCC SSL - 1 Year Version Not Applicable English Windows
- Entrust Certificate Services Cert Admin UCC SSL - 2 Year Version Not Applicable English Windows
- Entrust Certificate Services Certificate Administrator 3 Year SSL Certificates Version Not Applicable Language Not Applicable Windows
- Entrust Certificate Services Certificate Administrator EV SSL - 1 Year Version Not Applicable Language Not Applicable Windows
- Entrust Certificate Services Certificate Administrator EV SSL - 2 Year Version Not Applicable Language Not Applicable Windows
- Entrust Certificate Services Certificate Manager 7.0 English Windows
- Entrust Certificate Services Certificate Manager 7.1 English Windows
- Entrust Certificate Services Client Management Module Version Not Applicable Language Not Applicable Platform Not Applicable
- Entrust Certificate Services CMS Account 1 YR Version Not Applicable Language Not Applicable Platform Not Applicable
- Entrust Certificate Services CMS Account 2 YR Version Not Applicable Language Not Applicable Platform Not Applicable
- Entrust Certificate Services CMS Account 3 YR Version Not Applicable Language Not Applicable Platform Not Applicable
- Entrust Certificate Services CMS Account 4 YR Version Not Applicable Language Not Applicable Platform Not Applicable
- Entrust Certificate Services CMS Account Version Not Applicable ALL Platform Not Applicable
- Entrust Certificate Services Cross Certificate Fee - CASP Version Not Applicable Language Not Applicable Platform Not Applicable
- Entrust Certificate Services Cross Certificate Fee - Enterprise Version Not Applicable Language Not Applicable Platform Not Applicable
- Entrust Certificate Services ECS Advantage Certificate - 4 Year Version Not Applicable Language Not Applicable Platform Not Applicable
- Entrust Certificate Services ECS UC Certificate - 4 Year Version Not Applicable English Windows
- Entrust Certificate Services Enhanced Service Account Version Not Applicable Language Not Applicable Platform Not Applicable
- Entrust Certificate Services EV Certificate - 1yr Version Not Applicable Language Not Applicable Platform Not Applicable
- Entrust Certificate Services EV Certificate - 2yr Version Not Applicable Language Not Applicable Platform Not Applicable
- Entrust Certificate Services EV Certificates Version Not Applicable Language Not Applicable Platform Not Applicable
- Entrust Certificate Services EV SSL - 1 Year Version Not Applicable English Windows
- Entrust Certificate Services EV SSL - 2 Year Version Not Applicable English Windows
- Entrust Certificate Services Extended Validation Certificates Version Not Applicable Language Not Applicable Platform Not Applicable
- Entrust Certificate Services Partner Program Reseller Fees Version Not Applicable Language Not Applicable Platform Not Applicable
- Entrust Certificate Services Standard Certificate - 1 Year Version Not Applicable Language Not Applicable Platform Not Applicable
- Entrust Certificate Services Standard Certificate - 2 Year Version Not Applicable Language Not Applicable Platform Not Applicable
- Entrust Certificate Services Standard Certificate - 3 Year Version Not Applicable Language Not Applicable Platform Not Applicable
- Entrust Certificate Services Standard Certificate - 4 Year Version Not Applicable Language Not Applicable Platform Not Applicable
- Entrust Certificate Services Standard Certificate Units Version Not Applicable Language Not Applicable Platform Not Applicable
- Entrust Certificate Services Standard Certificates Version Not Applicable Language Not Applicable Platform Not Applicable
- Entrust Certificate Services UC Certificate - 1 Year Version Not Applicable Language Not Applicable Platform Not Applicable
- Entrust Certificate Services UC Certificate - 2 Year Version Not Applicable Language Not Applicable Platform Not Applicable
- Entrust Certificate Services UC Certificate - 3 Year Version Not Applicable Language Not Applicable Platform Not Applicable
- Entrust Certificate Services UC Certificate - 4 Year Version Not Applicable Language Not Applicable Platform Not Applicable
- Entrust Certificate Services UC Certificate Units Version Not Applicable Language Not Applicable Platform Not Applicable
- Entrust Certificate Services UC Certificates Version Not Applicable Language Not Applicable Platform Not Applicable
- Entrust Certificate Services UCC Certificate - 1 and 2 year Version Not Applicable English Windows
- Entrust Certificate Services UCC SSL - 1 year Version Not Applicable English Windows
- Entrust Certificate Services UCC SSL - 2 year Version Not Applicable English Windows
- Entrust Certificate Services UCC SSL - 3 year Version Not Applicable English Windows
- Entrust Certificate Services Web Hoster Service Account Version Not Applicable English Platform Not Applicable
- Entrust Certificate Services Wildcard Certificate Units Version Not Applicable Language Not Applicable Platform Not Applicable
- Entrust Certificate Services Wildcard Certificates Version Not Applicable Language Not Applicable Platform Not Applicable
SSL Certificates
Extended Validation (EV)
Advantage SSL
Standard SSL
Unified Communications
Code Signing Certificates
Adobe CDS
![[Certification Authorities - Webtrust - Deloitte]](/images/cert_services/deloitte_seal_sm.jpg)
1-866-267-9297