Microsoft KB Archive/183805

= PRB: Digitally Signed File Cannot Be Confirmed by IE4 =

Article ID: 183805

Article Last Modified on 7/18/2001

-

APPLIES TO


 * Microsoft ActiveX SDK
 * Microsoft Software Development Kit for Java 1.5
 * Microsoft Software Development Kit for Java 1.51

-



This article was previously published under Q183805



SYMPTOMS
When downloading a digitally signed file, rather than popping up the certificate dialog box as expected, a message box comes up indicating that the file has been digitally signed but that it cannot be confirmed.



CAUSE
Microsoft has recently confirmed a rare certificate verification problem caused by the .reg files offered as part of the tools set of the ActiveX SDK and SDK for Java 1.5x. The problem is that the .reg files, Wvtston.reg and Wvtstoff.reg, set the system to check Verisign's revocation server extraneously. This error occurs only when your system is set to check the revocation server, and the revocation server itself is down.



RESOLUTION
Use SetReg.exe available in the Internet Client SDK's \Inetsdk\Bin folder or the \bin\packsign directory of the SDK for Java 2.0x or later, rather than the .reg files in the ActiveX SDK or older SDK for Java. SetReg.exe should be used to disable Revocation checking on your machine.

By issuing the following command, the revocation server for individual certificates is disabled: setreg 4 true By issuing the following command, the revocation server for commercial certificates is disabled: setreg 5 true

