|
1029usr078198
Forum Admin
USA
333 Posts |
 Posted - November 12 2007 : 18:39:24
|
Before forums, there was Usenet (and there still is)!
How to troubleshoot secure sites in IE using windows xp
Delete Temporary Internet Files
To do so:
Start Internet Explorer.
On the Tools menu, click Internet Options, and then click
the General tab.
Under Temporary Internet files, click Delete Cookies.
Click OK when you are prompted to confirm the deletion.
Click Delete Files.
Click OK when you are prompted to confirm the deletion.
Under History, click Clear History.
Click Yes when you are prompted to delete your history of
visited Web sites.
Click OK.
Configure Security, Content, and Advanced Settings in
Internet Explorer
To do so:
Configure the security settings for the Trusted sites zone
in Internet Explorer. To do so:
In Internet Explorer, on the Tools menu, click Internet
Options, and then click the Security tab.
Click Trusted sites, and then click Default Level.
Add the SSL Secured (128-Bit) Web site to the Trusted
sites zone. To do so, click Sites, type the URL of the
site in the Add this Web site to the zone box, click Add,
click OK, and then click Apply.
Clear the Secure Sockets Layer (SSL) state and
AutoComplete history. To do so:
Click the Content tab.
Under Certificates, click Clear SSL State.
Click OK when you receive the message that the SSL cache
was successfully cleared.
Under Personal information, click AutoComplete.
Under Clear AutoComplete history, click Clear Forms. Click
OK when you are prompted to confirm the operation.
Click Clear Passwords. Click OK when you are prompted to
clear all previously saved passwords, and then click OK
two more times.
Verify that Internet Explorer is configured to use SSL 2.0
and SSL 3.0. To do so:
Click the Advanced tab.
In the Settings box, under Security, click to select the
Use SSL 2.0 and Use SSL 3.0 check boxes (if they are not
already selected), and then click OK.
Verify that the Date and Time Settings on Your Computer
Are Correct
To verify that your computer is configured with the
correct date and time settings:
Click Start, and then click Control Panel.
Click Date, Time, Language, and Regional Options, and then
click Date and Time.
Click the Date & Time tab.
Make sure that the date and time settings are configured
to use the current date and time, and then click OK.
Verify that Your Computer Is Using 128-Bit Encryption
To do so:
In Internet Explorer, on the Help menu, click About
Internet Explorer.
The level of encryption on your computer appears next to
the words Cipher Strength. Verify that the Cipher Strength
value appears as 128-bit.
Click OK.
Use System Restore to Return Your Computer to a Previous
State
The System Restore feature in Windows XP takes
a "snapshot" of critical system files and some program
files and stores this information as restore points. You
can use these restore points to return Windows XP to a
previous state. For additional information about how to do
so, click the following article number to view the article
in the Microsoft Knowledge Base:
Check Third-Party Firewall or Antivirus Programs
Make sure that third-party firewall or antivirus programs
that are installed on your computer are configured
correctly and are not preventing you from connecting to
security-enhanced Web sites. Try uninstalling firewalls
and antivirus from Add/Remove programs.
To manually remove Norton firewall, use RNIS
from http://service1.symantec.com/SUPPORT/nip.nsf/735050b77b1fcece88256bc7005c3bc6/23bda5412ae1a49688256abe00615e20?OpenDocument
Disable ICF
Use the System File Checker (Sfc.exe) Tool to Scan all
Windows File Protection (WFP) Protected Files
Use System File Checker with the /scannow parameter
(sfc /scannow) to immediately scan and verify the versions
of all the system files that Windows File Protection helps
protect. If System File Checker discovers that such a file
was overwritten, it retrieves the correct version of the
file from the cache folder (Systemroot\System32\Dllcache)
or from the Windows installation source files, and then
replaces the incorrect file. System File Checker also
checks and repopulates the cache folder. You must be
logged on as an administrator or as a member of the
Administrators group to run System File Checker. To run
System File Checker with the /scannow parameter:
Click Start, and then click Run.
In the Open box, type cmd, and then click OK.
At the command prompt, type sfc /scannow, and then press
ENTER.
Choose Safe mode with Networking (in case of Cable, DSL,
LAN) and do a clean boot
Verify that the Microsoft Cryptographic Services Service
Is Started
To verify that the Cryptographic Services service is
started (and to start it if it is not):
Click Start, and then click Run.
In the Open box, type cmd, and then click OK.
At the command prompt, type net start cryptsvc, and then
press ENTER.
Type exit to quit Command Prompt.
Register .Dll Files
Re-register the following .dll files:
Softpub.dll
Wintrust.dll
Initpki.dll
Dssenh.dll
Rsaenh.dll
Gpkcsp.dll
Sccbase.dll
Slbcsp.dll
Cryptdlg.dll
To do so:
Click Start, and then click Run.
In the Open box, type cmd, and then click OK.
At the command prompt, type the following lines and press
ENTER after each line:
regsvr32 softpub.dll
regsvr32 wintrust.dll
regsvr32 initpki.dll
regsvr32 dssenh.dll
regsvr32 rsaenh.dll
regsvr32 gpkcsp.dll
regsvr32 sccbase.dll
regsvr32 slbcsp.dll
regsvr32 cryptdlg.dll
Click OK when you receive the message that
DllRegisterServer in FileName succeeded.
Type exit to quit Command Prompt.
Uninstall any hotfixes (windows update). Especially look
for hotfix 328145, which was pulled because it broke
digital signing.
Create a New User Profile
In certain situations, you may not be able to locate SSL
Secured (128-Bit) Web sites if your Windows user profile
is damaged. To troubleshoot, log on to the computer as
another user and try to connect to a SSL Secured (128-Bit)
Web site. If you can connect to SSL Secured (128-Bit) Web
sites when you are logged in as a different user, this may
indicate that your user profile is corrupted. In this
situation, back up the information and settings that you
want from your profile (for example, the My Documents and
Favorites folders), and then delete the damaged profile.
To delete a user profile:
Log on to the computer as Administrator or as a member of
the Administrators group.
Click Start, and then click Control Panel.
Click Performance and Maintenance, and then click System.
Click the Advanced tab, and then under User Profiles,
click Settings.
In the Profiles stored on this computer list, click the
user profile that you want to delete, and then click
Delete.
Click Yes when you are prompted to confirm the deletion.
Click OK, click OK, and then quit Control Panel.
Log off the computer as Administrator, and then log on as
the user.
Windows creates a new profile for the user.
Note Alternatively, you may want to create a new user, and
then copy the data from your old profile to the profile of
the new user.
Regards..
(Atul)
Hope it helps,
David |
|
Troubleshooting access to secure websites
