[isalist] Re: Certificate Problem
- From: Jerry Young <jerrygyoungii@xxxxxxxxx>
- To: isalist@xxxxxxxxxxxxx
- Date: Thu, 19 May 2011 11:30:05 -0400
Make sure the root and intermediary certificates are installed in the
Computer certificate stores, not the User certificate stores. The error is
caused by some certificate in the chain not being installed on the server
correctly.
On Thu, May 19, 2011 at 11:06 AM, Rob Moore <RMoore@xxxxxxxx> wrote:
> Hello All—
>
>
>
> Has anyone run into this particular problem before? I’m trying to publish
> an RD Web Access site using TMG. I’ve configured RD Web Access on an
> internal server and it works internally. (Although when connecting to it I
> get a certificate error. I can connect anyway.) I can’t connect to it
> externally, though. I get this error:
>
> “The certificate chain was issued by an authority that is not trusted.
> (-2146893019)”
>
>
>
> I’ve tried buying a new cert (from Go Daddy). I followed the certificate
> installation instructions to the letter, including installation of the
> intermediate certificate, on both the TMG server and the internal server
> that is hosting the RD Web Access site. But when I do “Test Rule” on this
> rule, it tells me: “0x80090325 – The certificate chain was issued by an
> authority that is not trusted.” It suggests I see
> go.microsoft.com/fwlink/?LinkId=115965. All that says, though, is that I
> need to “Import the CA certificate.” I thought putting in the intermediate
> certificate did just that.
>
>
>
> I have four other Go Daddy certs on the TMG server and they all work
> normally.
>
>
>
> I’ve Googled these errors and mostly found the same advice, to install the
> CA certificate.
>
>
>
> Any hints? Should I talk to the Go Daddy folks?
>
>
>
> Thanks,
>
> Rob
>
>
>
> -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=
>
> Rob Moore
>
> Network Manager
>
> 215-241-7870
>
> Helpdesk: 800-500-AFSC
>
>
>
--
Cordially yours,
Jerry G. Young II, CISSP
Microsoft Certified Systems Engineer
Young Consulting & Staffing Services Company - Owner
www.youngcss.com
Other related posts:
