moutts

New Member
Joined
Sep 22, 2010
Messages
2
I have a web application which should prompt a security warning window when visiting a screen, which then shows the digitally signed publisher as my company name and to further install the ActiveX control. This ActiveX control is a digitally signed CAB file. This works perfectly in Windows XP 32bit IE8 and properly recognizes the signed publisher. Whereas in Win 7 64bit IE8 (with same Internet options settings as Win XP) the publisher is not verified and shows as "unverified publisher". I have attached the screen shot of the popup message. I would like to know why the publisher is not recognized in Win 7 and how do i get a normal security popup warning window instead of popup below the address bar. Any thoughts and suggestions will be greatly helpful.

Thanks
 

Attachments

Solution
It seems like you are facing an issue with how the publisher of your digitally signed CAB file is recognized in Windows 7 64-bit with Internet Explorer 8. Here are some insights and suggestions that might help you address this problem:

Reasons for Unverified Publisher Issue:​

  1. Certificate Trust: The issue might arise due to the trust level of the root certificate used to sign the CAB file not being recognized by the Windows 7 system.
  2. Cryptography Changes: Windows 7 uses updated cryptography protocols and validation mechanisms compared to Windows XP, which could affect how certificates are validated.

    Suggestions to Address the Issue:​

  3. Certificate Chain: Ensure that your certificate chain is...
It seems like you are facing an issue with how the publisher of your digitally signed CAB file is recognized in Windows 7 64-bit with Internet Explorer 8. Here are some insights and suggestions that might help you address this problem:

Reasons for Unverified Publisher Issue:​

  1. Certificate Trust: The issue might arise due to the trust level of the root certificate used to sign the CAB file not being recognized by the Windows 7 system.
  2. Cryptography Changes: Windows 7 uses updated cryptography protocols and validation mechanisms compared to Windows XP, which could affect how certificates are validated.

    Suggestions to Address the Issue:​

  3. Certificate Chain: Ensure that your certificate chain is correctly set up, including the root certificate, intermediate certificates, and the certificate used to sign the CAB file. Check if the root certificate is trusted in Windows 7.
  4. Certificate Revocation Lists: Ensure that your certificates have not been revoked. Windows uses Certificate Revocation Lists (CRLs) to check the status of certificates.
  5. Timestamping: Ensure that the certificates used to sign the CAB file are timestamped. Timestamping ensures that the certificate is valid beyond its expiration date.
  6. Security Zone Settings: Check if the security zone settings in Internet Explorer are properly configured. The security zone can impact how certificates are validated and trusted.

    Changing Security Warning Behavior:​

    To get a normal security popup warning instead of the current behavior below the address bar, you can try the following:
  • ActiveX Controls Settings:
    • Go to Internet Options -> Security -> Custom Level.
    • Under ActiveX Controls and Plug-ins, set the options related to ActiveX controls to either Prompt or Enable.
    • This might trigger a more visible prompt when your ActiveX control is accessed.

      Addressing Security Concerns:​

      While ActiveX controls can provide functionality, they are also a common target for malware. Ensure that your ActiveX control is secure and necessary for your application. Consider alternative technologies like HTML5 if possible, as they are more secure and widely supported. By addressing these points, you may be able to troubleshoot the issue of the unverified publisher and modify the behavior of the security warning popup in Internet Explorer on Windows 7 64-bit. If you need further assistance or details on any specific aspect, feel free to ask!
 
Solution