Microsoft KB Archive/932156

Knowledge Base

You cannot view certificate information in Windows Internet Explorer 7 or in Certificate Manager after you successfully import a certificate on a Windows Vista-based computer

Article ID: 932156

Article Last Modified on 10/25/2007

---

APPLIES TO

• Windows Vista Business
• Windows Vista Enterprise
• Windows Vista Home Basic
• Windows Vista Home Premium
• Windows Vista Ultimate

---

Important This article contains information about how to modify the registry. Make sure that you back up the registry before you modify it. Make sure that you know how to restore the registry if a problem occurs. For more information about how to back up, restore, and modify the registry, click the following article number to view the article in the Microsoft Knowledge Base:

256986 Description of the Microsoft Windows registry

SYMPTOMS

After you successfully import a certificate on a Windows Vista-based computer, you cannot view the certificate information in Windows Internet Explorer 7 or in Certificate Manager.

CAUSE

This problem occurs if you do not have Read permissions for the following registry subkey:

HKEY_CURRENT_USER\Software\Microsoft\SystemCertificates\Root\ProtectedRoots

RESOLUTION

For more information about how to resolve this problem, click the following article number to view the article in the Microsoft Knowledge Base:

942543 You cannot view certificate information in Windows Internet Explorer 7 or in Certificate Manager if you use an unattended answer file to install Windows Vista

How to resolve this problem by modifying the registry

Warning Serious problems might occur if you modify the registry incorrectly by using Registry Editor or by using another method. These problems might require that you reinstall the operating system. Microsoft cannot guarantee that these problems can be solved. Modify the registry at your own risk.

To resolve this problem, assign Read permissions for the ProtectedRoots registry key to the user who is currently logged on to the computer. To do this, follow these steps:

1. Click Start , type regedit in the Start Search box, and then click regedit.exe in the Programs list.
   
   If you are prompted for an administrator password or for confirmation, type your password, or click Continue.
2. Locate and then right-click the following registry subkey:

   HKEY_CURRENT_USER\Software\Microsoft\SystemCertificates\Root\ProtectedRoots

3. Click Permissions.
4. Use one of the following methods:
   • If the user who is currently logged on to the computer is listed in the Group or user names box, click the user's name, click to select the Read check box in the Allow column, and then click OK.
   • If the user who is currently logged on to the computer is not listed in the Group or user names box, follow these steps:
     1. Click Add.
     2. Type the name of the user who is currently logged on to the computer, and then click OK.
     3. In the Group or user names box, select the user name, click to select the Read check box in the Allow column, and then click OK.
5. Exit Registry Editor.

STATUS

Microsoft has confirmed that this is a problem in the Microsoft products that are listed in the "Applies to" section.

Keywords: kbtshoot kbbug kbexpertiseinter kbexpertisebeginner KB932156

---

Send feedback to Microsoft

© Microsoft Corporation. All rights reserved.