Internet Explorer certificate error

[jumbo777_apc]

This was originally posted on APC forums on 5/7/2015

---

When logged into the web based agent I get a message "There is a problem with this website’s security certificate". Is there a way around this?

[Terry_Kennedy_apc · Accepted solution]

This was originally posted on APC forums on 5/8/2015

---

I had a long detailed reply which either my browser or the forum ate.

To summarize, try visiting the page with a different browser (Firefox, Chrome, etc.) and see if you get a more useful error message. If so, post back with the error and we'll go from there.

[jumbo777_apc]

This was originally posted on APC forums on 5/8/2015

---

In Firefox I was able to resolve the issue. In IE, there's a very complex procedure with certificates that I'm not familiar with. That being said, I will either use Firefox or enter the page in IE and click on "Continue to this website (not recommended)".

[Terry_Kennedy_apc]

This was originally posted on APC forums on 5/8/2015

---

Ok, it sounds like you have an untrusted certificate authority as opposed to a SSL handshake problem. Since I have a large number of devices from various manufacturers, I created a fictitious certificate authority and installed it in the various web browsers, and I generate my own certificates signed by that authority.

If you have access to a system with the command-line openssl utility installed, I can post the instructions for creating a certificate authority, installing it in common browsers, and also generating certificates signed by it.

That's almost certainly overkill if you just have the single device (we have hundreds). There's probably a "ignore this and never complain about it again for this site" option in IE 11, but I haven't kept track of it because I generate my own certificates.

[BillP]

This reply was originally posted by Bill on APC forums on 5/8/2015

---

Hi,

I assume you are asking about PowerChute Business Edition web Agent. The reason for the error is because when PowerChute creates the security certificate it is created using the FQDN and IE does not recognize the systems FQDN. To resolve the issue when opening the page click "Continue to this web site (not recommended)". When the PowerChute page opens at the top you will see a tab titled "Certificate error" Click that tab. A new pop up window will appear. At the bottom of that page click "View certificate". The certificate information window will appear and at the bottom of this page click "Install certificate". The Certificate import window will appear and at the bottom of this window click "Next>". The certificate store window will appear and in this window select "place all certificates in the following store" and then click "Browse". The "Select Certificate Store" window will appear and in this window select "Trusted Root Certificate Authority" and then click "OK". The Certificate Import Wizard window will reappear. In the certificate store: drop down box you should now see "Trusted Root Certification Authorities" at the bottom of the window click "Next>". The “Completing the Certificate Import Wizard” window will appear and at the bottom of this page click "Finish". A security warring window will appear asking "Do you want to install this certificate?" at the bottom of this page click "Yes". A window will appear stating "The import was successful". In this window click "OK". Final in the Certificate Information window at the bottom click "OK". The next time you launch the PowerChute Agent from IE you will not be warned about the certificate.

[jumbo777_apc]

This was originally posted on APC forums on 5/8/2015

---

Hi Bill,

Are you referring to IE 11? When I go to the website I go to "Continue to this website (not recommended)". In the url box there is a red "X" and next to it says "certificate error". I click on that and I get a popup that says "untrusted certificate" with information and an option to view certificates at the bottom. A window pops up with 3 tabs - General, Details annd certification path. There is no option to install certificate. In the certification path tab there is an option to view certificate, but is grayed out. Double clicking on the certificate does not help either. In the bottom of the window (information box) says " This CA Root certificate is not trusted because it is not in the Trusted Root Certification Authorities store". What version of IE did you resolve this problem" Thanks!

[BillP]

This reply was originally posted by Bill on APC forums on 5/8/2015

---

Hi,

In IE 11 you select View Install Certificate from the General tab. I have uploaded a video to this link.

https://schneider-electric.box.com/s/f1gv8stwi52s0i3ni19m5pxj8zcrq4bf

[jumbo777_apc]

This was originally posted on APC forums on 5/8/2015

---

Hi Bill,

Here's what I got. There is no option to install certificate. Thoughts? Thanks,

Clark

[jumbo777_apc]

This was originally posted on APC forums on 5/9/2015

---

Hi Bill,

Ok, I did it but there was a step missing. I had to go into IE Internet Options and select the security tab. I selected the "Trusted sites" at the top (check mark icon) and clicked on the Sites button. From there I was able to add the url. I went back and the "install certificate" button was there. I followed the steps in the video and everything worked. Thank you, Bill!