Microsoft KB Archive/177179

= Internet Explorer does not display certificate from a signed CAB file =

Article ID: 177179

Article Last Modified on 6/14/2006

-

APPLIES TO


 * Microsoft Software Development Kit for Java 1.51
 * Microsoft Software Development Kit for Java 2.02
 * Microsoft Software Development Kit for Java 2.01
 * Microsoft Software Development Kit for Java 2.02
 * Microsoft Software Development Kit for Java 3.0
 * Microsoft Software Development Kit for Java 3.1
 * Microsoft Software Development Kit for Java 3.2
 * Microsoft Internet Explorer 3.01
 * Microsoft Internet Explorer 3.02
 * Microsoft Internet Explorer 4.0 128-Bit Edition
 * Microsoft Internet Explorer 4.01 Service Pack 2
 * Microsoft Internet Explorer 4.01 Service Pack 1
 * Microsoft Internet Explorer 4.01 Service Pack 2

-



This article was previously published under Q177179



SUMMARY
There are several scenarios where Internet Explorer does not show a certificate for a signed CAB file. The following section describes those scenarios.



MORE INFORMATION
Here are the three most common reasons for this behavior:  If the cab file was signed using a test certificate, you must enable test certificates for the local machine; otherwise, the signature is not considered valid. You can do this by running the Wvtston.reg (SDK for Java 1.5x) or Setreg.exe (SDK for Java 2.0 or later) file included with the code signing kit. You have accepted a software publisher as "always trusted." To verify this, in Internet Explorer, go to view.Options.Security.Publishers to ensure the publisher does not appear in the list box. If so, you can use this dialog box to remove it.  If the client machine is running Microsoft Windows NT, the current user must have administrator privileges or have "Full Control" access to the following registry keys (and existing subkeys): HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Cryptography HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\WinTrust These privileges can be granted by a user on the machine who has administrator privileges using Regedt32.exe. This requirement will be addressed in future versions of Internet Explorer. NOTE: If the certificate does not appear or you answer "no" to the certificate, the applet will still load but will not be trusted. 

