127 lines
8.3 KiB
HTML
127 lines
8.3 KiB
HTML
<?xml version="1.0" encoding="UTF-8"?>
|
|
<!DOCTYPE html
|
|
PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
|
|
<html lang="en-us" xml:lang="en-us">
|
|
<head>
|
|
<meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
|
|
<meta name="security" content="public" />
|
|
<meta name="Robots" content="index,follow" />
|
|
<meta http-equiv="PICS-Label" content='(PICS-1.1 "http://www.icra.org/ratingsv02.html" l gen true r (cz 1 lz 1 nz 1 oz 1 vz 1) "http://www.rsac.org/ratingsv01.html" l gen true r (n 0 s 0 v 0 l 0) "http://www.classify.org/safesurf/" l gen true r (SS~~000 1))' />
|
|
<meta name="DC.Type" content="reference" />
|
|
<meta name="DC.Title" content="Troubleshoot browser problems" />
|
|
<meta name="DC.Relation" scheme="URI" content="rzahurzahu666dcmtroubleshooting.htm" />
|
|
<meta name="copyright" content="(C) Copyright IBM Corporation 2000, 2006" />
|
|
<meta name="DC.Rights.Owner" content="(C) Copyright IBM Corporation 2000, 2006" />
|
|
<meta name="DC.Format" content="XHTML" />
|
|
<meta name="DC.Identifier" content="rzahu6ab-troublebrowser" />
|
|
<meta name="DC.Language" content="en-us" />
|
|
<!-- All rights reserved. Licensed Materials Property of IBM -->
|
|
<!-- US Government Users Restricted Rights -->
|
|
<!-- Use, duplication or disclosure restricted by -->
|
|
<!-- GSA ADP Schedule Contract with IBM Corp. -->
|
|
<link rel="stylesheet" type="text/css" href="./ibmdita.css" />
|
|
<link rel="stylesheet" type="text/css" href="./ic.css" />
|
|
<title>Troubleshoot browser problems</title>
|
|
</head>
|
|
<body id="rzahu6ab-troublebrowser"><a name="rzahu6ab-troublebrowser"><!-- --></a>
|
|
<!-- Java sync-link --><script language="Javascript" src="../rzahg/synch.js" type="text/javascript"></script>
|
|
<h1 class="topictitle1">Troubleshoot browser problems</h1>
|
|
<div><div class="section"><p>Use the following table to help you troubleshoot some of the more
|
|
common browser-related problems that you may encounter while working with
|
|
Digital Certificate Manager (DCM).</p>
|
|
</div>
|
|
<div class="section"><div class="p">
|
|
<div class="tablenoborder"><table cellpadding="4" cellspacing="0" summary="" width="100%" frame="border" border="1" rules="all"><thead align="left"><tr><th valign="top" width="41.97761194029851%" id="d0e22"><span>Problem</span></th>
|
|
<th valign="top" width="58.02238805970149%" id="d0e25"><span>Possible Solution</span></th>
|
|
</tr>
|
|
</thead>
|
|
<tbody><tr><td align="left" valign="top" width="41.97761194029851%" headers="d0e22 ">Microsoft<sup>®</sup> Internet Explorer does not
|
|
let you select a different certificate until you start a new browser session.</td>
|
|
<td align="left" valign="top" width="58.02238805970149%" headers="d0e25 ">Begin a new browser session for Internet
|
|
Explorer.</td>
|
|
</tr>
|
|
<tr><td align="left" valign="top" width="41.97761194029851%" headers="d0e22 ">Internet Explorer does not show all selectable
|
|
client/user certificates in a browser's selection list. Internet Explorer
|
|
only shows certificates, issued by the trusted CA, that you can use at the
|
|
secure site.</td>
|
|
<td align="left" valign="top" width="58.02238805970149%" headers="d0e25 ">A CA must be trusted in the key database
|
|
as well as by the secure application. Be sure that you signed on to the PC
|
|
for the Internet Explorer browser with the same user name as the one that
|
|
put the user certificate in the browser. Get another user certificate from
|
|
the system that you are accessing. The system administrator must be sure that
|
|
the certificate store (key database) still trusts the CA that signed the user
|
|
and system certificates.</td>
|
|
</tr>
|
|
<tr><td align="left" valign="top" width="41.97761194029851%" headers="d0e22 ">Internet Explorer 5 receives the CA certificate,
|
|
but cannot open the file or find the disk to which you saved the certificate.</td>
|
|
<td align="left" valign="top" width="58.02238805970149%" headers="d0e25 ">This is a new browser feature for certificates
|
|
that are not yet trusted by the Internet Explorer browser. You can choose
|
|
the location on your PC.</td>
|
|
</tr>
|
|
<tr><td align="left" valign="top" width="41.97761194029851%" headers="d0e22 ">You received a browser warning that the system
|
|
name and system certificate do not match.</td>
|
|
<td align="left" valign="top" width="58.02238805970149%" headers="d0e25 ">Some browsers do different things for uppercase
|
|
and lowercase matching on system names. Type the URL with the same case as
|
|
the system certificate shows. Or, create the system certificate with the
|
|
case that matches what most users use. Unless you know what you are doing,
|
|
it is best to leave the server name or system name as it was. You must also
|
|
check that your domain name server is set up correctly.</td>
|
|
</tr>
|
|
<tr><td align="left" valign="top" width="41.97761194029851%" headers="d0e22 ">You started Internet Explorer with HTTPS
|
|
instead of HTTP, and you received a warning of a secure and nonsecure mix
|
|
of sessions.</td>
|
|
<td align="left" valign="top" width="58.02238805970149%" headers="d0e25 ">Choose to accept and ignore the warning;
|
|
a future release of Internet Explorer fixes this problem.</td>
|
|
</tr>
|
|
<tr><td align="left" valign="top" width="41.97761194029851%" headers="d0e22 ">Netscape Communicator 4.04 for Windows<sup>®</sup> converted
|
|
hexadecimal values A1 and B1 to B2 and 9A in the Polish code page.</td>
|
|
<td align="left" valign="top" width="58.02238805970149%" headers="d0e25 ">This is a browser bug that affects NLS.
|
|
Use a different browser or even use the same version of this browser on a
|
|
different platform, such as Netscape Communicator 4.04 for AIX<sup>®</sup>.</td>
|
|
</tr>
|
|
<tr><td align="left" valign="top" width="41.97761194029851%" headers="d0e22 ">In a user profile, Netscape Communicator
|
|
for 4.04 showed uppercase user certificate NLS characters correctly, but showed
|
|
lowercase characters incorrectly.</td>
|
|
<td align="left" valign="top" width="58.02238805970149%" headers="d0e25 ">Some national language characters that were
|
|
entered correctly as one character but are not the same character when displayed
|
|
later. For example, on the Windows version of Netscape Communicator
|
|
4.04, the hexadecimal values A1 and B1 were converted to B2 and 9A for the
|
|
Polish code page, resulting in different NLS characters being displayed.</td>
|
|
</tr>
|
|
<tr><td align="left" valign="top" width="41.97761194029851%" headers="d0e22 ">The browser continues to tell the user that
|
|
the CA is not yet trusted.</td>
|
|
<td align="left" valign="top" width="58.02238805970149%" headers="d0e25 ">Use DCM to set the <span class="uicontrol">CA status</span> to <span class="uicontrol">enabled</span> to
|
|
mark the CA as trusted.</td>
|
|
</tr>
|
|
<tr><td align="left" valign="top" width="41.97761194029851%" headers="d0e22 ">Internet Explorer requests reject the connection
|
|
for HTTPS.</td>
|
|
<td align="left" valign="top" width="58.02238805970149%" headers="d0e25 ">This is a problem with the browser function
|
|
or its configuration. The browser chose not to connect to a site that is using
|
|
a system certificate that might be self-signed or may not be valid for some
|
|
other reason.</td>
|
|
</tr>
|
|
<tr><td valign="top" width="41.97761194029851%" headers="d0e22 ">Netscape Communicator browser and server products
|
|
employ root certificates from companies, including, but not limited to, VeriSign,
|
|
as an enabling feature of SSL communications — specifically, authentication.
|
|
All root certificates expire periodically. Some Netscape browser and server
|
|
root certificates expired between December 25, 1999 and December 31, 1999.
|
|
If you did not fix this problem on or before December 14, 1999, you will receive
|
|
an error message.</td>
|
|
<td valign="top" width="58.02238805970149%" headers="d0e25 ">Earlier versions of the browser (Netscape Communicator
|
|
4.05 or earlier) have certificates that expire. You need to upgrade the browser
|
|
to the current Netscape Communicator version. Information on browser root
|
|
certificates is available on many sites including <samp class="codeph">http://home.netscape.com/security/</samp> and <samp class="codeph">http://www.verisign.com/server/cus/rootcert/webmaster.html</samp>. Free browser downloads are available from <samp class="codeph">http://www.netcenter.com</samp>.</td>
|
|
</tr>
|
|
</tbody>
|
|
</table>
|
|
</div>
|
|
</div>
|
|
</div>
|
|
</div>
|
|
<div>
|
|
<div class="familylinks">
|
|
<div class="parentlink"><strong>Parent topic:</strong> <a href="rzahurzahu666dcmtroubleshooting.htm" title="Review this information to learn how to resolve some of the more common errors that you may experience when using DCM.">Troubleshoot DCM</a></div>
|
|
</div>
|
|
</div>
|
|
</body>
|
|
</html> |