Microsoft KB Archive/238599

= Signature Verification Error Messages in Internet Explorer 3.02 =

PSS ID Number: 238599

Article Last Modified on 10/31/2003

-

The information in this article applies to:


 * Microsoft Internet Explorer 3.02 for Windows NT 4.0
 * Microsoft Internet Explorer 3.02 for Windows 95

-



This article was previously published under Q238599



SYMPTOMS
When you use Internet Explorer, you may receive "Authenticode signature verification" error messages for software (including ActiveX controls) that was digitally signed after December 31, 1999, or for software that was digitally signed before this date but was not time stamped. If you ignore or bypass the error message, the software may work correctly.



CAUSE
This problem occurs because Internet Explorer 3.02 contains certificates that expire on December 31, 1999, at 5:00 P.M. In Internet Explorer 3.02, all certificates are verified up to the Microsoft root certificate by using "glue" certificates. These glue certificates expire on December 31, 1999, at 5:00 P.M. Software that is digitally signed with the Authenticode technology references a chain of certificates that include these glue certificates to identify the signer and certification authorities that certified the signer. If the software is not time stamped, Authenticode cannot determine the validity of the information in the certificate and reports the problem when one of the certificates in the chain expires.



RESOLUTION
To resolve this problem, use either of the following methods.

Upgrade to Internet Explorer Version 4.x or Later
For information about how to upgrade to Internet Explorer 4.x or later, please see the following Microsoft Web site:

http://www.microsoft.com/windows/ie/default.htm

Install the Authenticode Update
Obtain and install the Authenticode Update from the following Microsoft Web site:

http://www.microsoft.com/windows/ie/security/authenticode.asp

To work around this problem, you can ignore the error message.



STATUS
Microsoft has confirmed that this is a problem in the Microsoft products that are listed at the beginning of this article.



MORE INFORMATION
Software that is digitally signed and time stamped before December 31, 1999, is not affected because Authenticode evaluates the certificate chain using the time-stamped time, not the current computer time.

Keywords: kb3rdparty kbenv kberrmsg kbpending kbprb KB238599

Technology: kbIE302Win95 kbIE302WinNT400 kbIE95Search kbIENT400Search kbIEsearch

-

[mailto:TECHNET@MICROSOFT.COM Send feedback to Microsoft]

© 2004 Microsoft Corporation. All rights reserved.