bad security certificate for Windows 7 Enterprise Trial download
When I try to download the Windows 7 Enterprise Trial from Technet via IE8, I get an error ("There is a problem with this website's security certificate") at https://wb.dlservice.microsoft.com/download/release/Win7/3/b/a/3bac7d87-8ad2-4b7a-87b3-def36aee35fa/7600.16385.090713-1255_x64fre_enterprise_en-us_EVAL_Eval_Enterprise-GRMCENXEVAL_EN_DVD.iso?lcid=1033 Is this a known problem?
September 24th, 2009 2:30pm

Hi, Generally, certificate errors occur when there is a problem with a certificate or the server's use of the certificate. Internet Explorer can help keep your information more secure by warning you about certificate errors. If the certificate has an error, it might indicate that your connection has been intercepted or that the web server is misrepresenting its identity. However, while this is not recommended, you can click Continue to this website (not recommended) on the certificate error blocking page to go to the website. Best Regards.Dale Qiao
Free Windows Admin Tool Kit Click here and download it now
September 25th, 2009 9:09am

Hi Dale. Thanks for the reply. I understand the general function of security certificates. The question is why I (consistently) get a certificate error from the particular Microsoft site that I mentioned (and nowhere else). It seems highly unlikely that my (not wireless) connection to my ISP is being intercepted. Does anyone else have the same problem at that site? Or can anyone here access the download and *not*get the certificate error?
September 25th, 2009 1:22pm

This error may occur if your computer's date and time are incorrect.Carey Frisch
Free Windows Admin Tool Kit Click here and download it now
September 25th, 2009 3:41pm

Thanks, but the date and time on my PC are correct. (The time is automatically updated from time servers.)
September 25th, 2009 6:14pm

I've now tried it on a second computer, with a different Internet connection, and I still get the same security-certificate error for the Enterprise Trial download. (The date and time are correct on the second computer as well.) Both computers are running Windows 7 RC (fully updated and virus-protected). All other https sites I've tried do not show any security-certificate error.
Free Windows Admin Tool Kit Click here and download it now
September 26th, 2009 4:05pm

Click Start, type regedit in the Start Search box, and then press ENTER. Locate and then click the following registry subkey: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Main\FeatureControl On the Edit menu, point to New, and then click Key. Type FEATURE_ERROR_PAGE_BYPASS_ZONE_CHECK_FOR_HTTPS_KB950067 to name the new registry subkey, and then press ENTER. On the Edit menu, point to New, and then click DWORD Value. Type iexplore.exe to name the new registry entry, and then press ENTER. On the Edit menu, click Modify. Type 1, and then click OK. Exit Registry Editor. Carey Frisch
September 26th, 2009 7:15pm

Hi Carey. Thanks, but why would the KB950067 hotfix be recommended here? The hotfix(from August 2008)is for IE7 under Windows XP or Vista, when certain net-related Group Policy changes have been configured. As I mentioned, I'm running IE8 under Windows 7 RC; and I have not configured any Group Policy changes. Moreover, the hotfix pertains to a certificate error that occurs "if the SSL Web site that you try to visit resides in a more privileged zone than the Internet zone, such as in an intranet zone". But the site I'm visiting is just in the Internet zone. (And IE8 is using its default security settings.) Moreover, the hotfix requires installing code, in addition to the registry change you described. The registry change does nothing if the hotfix code is not installed. No hotfix code is available for Windows 7.
Free Windows Admin Tool Kit Click here and download it now
September 26th, 2009 7:33pm

On the web page that displays "There is a problem with this website's security certificate" click on "Continue to this website (not recommended)" and you'll be set to go.Carey Frisch
September 28th, 2009 12:31am

So should security-certificate warnings just be ignored? If so, what's the point of having the certificates at all?
Free Windows Admin Tool Kit Click here and download it now
September 28th, 2009 12:57am

I share your opinion. If the only answer being given is to IGNORE the warning and continue, and this is a Microsoft site then it begs the question, 'why bother'
October 2nd, 2009 12:52pm

Use Firefox. It doesn't mind this warning.
Free Windows Admin Tool Kit Click here and download it now
October 2nd, 2009 8:30pm

I get this certificate error in firefox as well.
October 5th, 2009 4:28pm

I also am having this problem on Vista with IE8.
Free Windows Admin Tool Kit Click here and download it now
October 5th, 2009 9:15pm

Use Firefox. It doesn't mind this warning. Thanks for the suggestion, but others here say they see the problem there too. I've already tried this in IE8 and Chrome, and I don't want to install a third browser just to be able to securely access a Microsoft site that doesn't work properly with Microsoft's own current browser. A Microsoft person already contributed to this thread, saying that my Internet connection might be getting intercepted, which obviously is not a plausible explanation for the certificate-errors we're all seeing. So can someone from Microsoft please explain what's really going on? Microsoft says it takes security seriously. But that's a sham if Microsoft allows its MVPs to advise users to override standard, basic security precautions (without even mentioning the risks), while Microsoft itself remains silent.
October 6th, 2009 3:29pm

I spent quite a bit of time checking my system and verifying the owner of the IP reached by https://wb.dlservice.microsoft.com server. Using Microsoft Network Monitor 3.3 the site address is 65.55.116.181, which (when checked with whois.net) is owned by Microsoft. I wanted to be certain that it wasn't a problem with DNS hijacking, as this could be local to my ISP , or just a few ISP's. As far as I can tell, this error happens all over the world so it is a bad cert. on the server, but I can't get MS to fix it! As at 04 October 2009, I have reported this issue to Microsoft Support 4 times - The first report was completely ignored with only an acknowledgement message stating "2 working day response" - Never happened. Second report resulted in a message about updating my antivirus software!! Third report resulted in a message saying "I highlighted this to the relevant team and they have now advised me that this issue has now been solved." = Rubbish! The fourth report is still ongoing I have even put a "how can we make this page better" response on a few MS support pages about Bad certificates stating that there is no point in advising customers how to set up their servers if Microsoft can't do it themselves! Security is a joke with Microsoft! PS. I did download the 32 bit version on the 27th of October, without any problem! Also reported to webadmin and iprrms@microsoft.com , which may both be invalid, or a waste of time. ( 5th November 2009 ) Also reported to secure@microsoft.com (see http://www.microsoft.com/technet/security/bulletin/alertus.aspx for info about reporting issues) The UK Response Management Team got back to me today :- They apologised for stating that this issue had been fixed when it had not and said now that the relevant team "have done some further investigation and have confirmed that this issue has been fixed two locales in the 64 bit experience were set to HTTPS instead of HTTP." The site now has the "S" removed as it should not have been secure in the first place!!! ie use http://wb.dlservice.microsoft.com...etc.etc..... This is now resolved!
Free Windows Admin Tool Kit Click here and download it now
November 5th, 2009 2:44am

This topic is archived. No further replies will be accepted.

Other recent topics Other recent topics