What's New In IT Edge?
 
troubleshooting

Solve use client certificates in Chrome or IE on Windows 10

After use self signed client certificates, sometimes you can’t choose the certs you have imported.

If anyone has the same problem, here is the solution and it should work on Windows 7, 8 and 10.

  1. Create a windows management console file. Start -> Run -> mmc.exe
  2. In the console window: File -> Add/Remove Snap-in...
  3. Choose Certificates snap-in and choose to manage certificates for My user account in the next window.
  4. Back in the Add or Remove Snap-ins dialog, choose Group Policy Object Editor and Add it to the Console Root. Leave Group Policy Object set to LocalComputer in the next dialog and click Finish.
  5. Click OK to leave the Add or Remove Snap-ins dialog.

At this point you should be looking at a Console window like this:

enter image description here

Now, import your certificates.

  1. Expand the Certificates snap-in and click to Personal. Then right-click on the middle pane and choose All Tasks -> Import.... The Certificate Import Wizard will appear. Just import your user’s certificate without changing any of the default settings.
  2. Expand the Trusted Root Certification Authorities and click on Certificates. Again, click on the middle pane and choose All Tasks -> Import.... Import your CA’s certificate without changing any of the default settings.

Now to the interesting part…

Back to the Console Root, navigate under Local Computer Policy snap-in to Computer Configuration -> Windows Settings -> Security Settings -> Public Key Policies. You should see a window like this:

enter image description here

Double click on Certificate Path Validation Settings. Check Define these policy settings and select the settings as in the picture below.

enter image description here

Then, click on Select Certificate Purposes and make sure your intended purposes are included (Client Authentication and Server Authentication were the ones I needed.). Click Apply and close the Console window. You will be asked if you want to save your settings. You may choose to do so if you want to save your configuration for others to re-use.

Make sure to restart Chrome or IE in order for the changes to take effect.