Security Certificate errors

[cadlewv]

Hello. I work for a company that needs access to a website for ordering. After deploying new pc's to a few workstations in a particular department, they are having difficulties going to this website (certificate errors). I have checked the obvious (time settings), tried to install the certificate in IE6 and 7, as well as creating a permanent exception in Firefox... it still has a problem.

Now... why I don't think it may be a problem with the website...
1) In IE, once you've been made aware of the certificate issue, and select the option of continuing on anyway, and you don't close out IE, you can keep going without any hitches. Once you close IE and restart it, you have to do it all over again
2) In FF, it allows the creation of a permanent exception, and it worked flawlessly for a day or two... but then once inside the ordering section of the site, it hangs...every time.

So, IE takes forever (security certificate issue) to get there, but performs fine once there. FF gets there flawlessly, but hangs once there.

The website's URL is: https://supply.mckesson.com.

If there are -any- solutions.. especially one that would let me beat IE into stop giving certificate errors, please let me know.

Thanks ahead.

[Force Flow]

Just by visiting the link you provided, Firefox 3, Opera 9.26, IE6 and IE7 appear to work fine. The certificate is loaded without prompting on that page.

[glc]

Try going to Windows Update, look in the optional components, and get the root certificates update.

[cadlewv]

What it gives me is the following:

'This certificate cannot be verified up to a trusted certification authority'

But under 'Certification Path' it states that the certificate is ok.

We have a very large network where I work. Not sure if that might be part or all of the problem.

[cadlewv]

glc, if my company filters the updates and pushes only the one's they want, how would i go about getting it? i am in the IT department (which means i should know this)... but i'm only a help desk analyst, and no one else knows (locally) without having to call corporate (headache)...

[cadlewv]

ok, i figured it out (how to download the update)... but the update didn't fix the problem... still getting the error.

[glc]

Best suggestion I have now is compare all the settings in IE with a system that works. Pay particular attention to the Advanced tab.

[cadlewv]

Problem is fixed... although I'm still not sure what the problem was... However, I would like to offer the fix in case anyone would like to analyze it.

In the profiles of users that were able to get to the site without a certificate error, there was a folder named 'CryptnetUrlCache' in C:\Documents and Settings\'User'\Application Data\Microsoft. Profiles of people who had trouble accessing the site properly didn't have this folder or its contents. Basically, we copied the entire folder and it's few contents to the corresponding locations in the problematic profiles and it fixed everything. It did have some files, when edited in wordpad, that had references to Verisign, although most of each file was encrypted.

Thanks for all of your help... and any further information on this. The webmaster of the site as well as a very large, national hospital network couldn't figure out what the problem was. Heck, I still don't know either, just got lucky.