Windows XP Root Certificate Update, Microsoft KB 931125

July 5, 2007

I continuously get invalid or expired certificate notices whenever trying to

visit any website. Does anyone know how to delete this update? It doesn't

show up when I go to the change or delete programs.

July 6, 2007

"Frustrated" <Frustrated@discussions.microsoft.com> wrote in message

news:9C4D4B3A-D1EB-4FA6-8EA2-127969C0F480@microsoft.com...

>I continuously get invalid or expired certificate notices whenever trying to

> visit any website.

Are you using a proxy? FWIW you would get the same symptom

if you had Fiddler2 acting as a proxy.

> Does anyone know how to delete this update? It doesn't

> show up when I go to the change or delete programs.

The keywords for the article include kbhowto, kbinfo so if there was an update

I doubt it was a conventional (packaged) one.

Did you visit any of the supplementary information pages?

Though their focus seems to be for Vista users

I think there are enough clues for XP users there too.

For example, doing a find for root on this page finds:

<quote>

Turn off Automatic Root Certificates Update:

Specifies whether to automatically update root certificates

using the list of trusted certification authorities that Microsoft maintains

on the Windows Update Web site. If you enable this policy setting,

when a user is presented with a certificate issued by an untrusted root authority,

the user's computer will not contact the Windows Update Web site.

</quote>

So this could be a clue for an XP user to open Group Policy

(e.g. Run... gpedit.msc) and search for policies related

to certificates. I think I found that one under

Local Computer Policy

Computer Configuration

Administrative Templates

System

Internet Communication Management

Internet Communication Settings

So, is that one set on your system? If so, perhaps it would

explain your problem symptom?

HTH

Robert Aldwinckle

---

Recommended Posts