Security Certificate question/help

[Sean Murray_1]

When going to management pages of managed nodes (https://xxx:2381) I get prompted to install cert in root store.
Tells me it is not trusted and to enable trust.
Can see when viewing cert than date is valid, server name is both as issued by and issued to.
Is there a way to get it to stop prompting when you go to each server the first time?
Thanks.

[Rob Buxton]

No I don't think there is.
This is checking the certs in your local list against the server you browse to.

[Darrin Rawls]

When you browse to the managed device the first time, view the certificate and then click to install the cert. From then on, from that machine only, you should not get the pop-up provided you browse to it the same way each time (i.e. https://fulldns:2381) or from HPSIM.

You'd have to install the self-signed cert from each device...that's one benefit of having your own PKI and having a trusted root cert. :)

Otherwise, it doesn't matter about the pop-up (other than annoyance) b/c it is actually validating the data and telling you about it. Hopefully instilling confidence of what you are actually connecting too....

[Sean Murray_1]

Thanks. I suppose I can also export all the certs from the boxes and install them in the Root store on each users PCs.
I always install them and they are fine. But I was asked by above to stop it if I can. Possibly an annoyance for some, but it is secure if you ask.

[Matthew Finnigan]

Does anyone have any walkthrough for making this work automatically in a Win2k AD environment?

[Sean Murray_1]

Actually, here is a clarification on my earlier request:

How can I, instead of self-signing the certs, have them signed by a CA that is accepted by default in browsers.