TLS with clientAuth in Internet Explorer (ie11 / win10 insider preview 10.0.19608)

April 22, 2020, 2:59 am

≫ Next: IE,windows help and support

≪ Previous: Auto-Discovery of WPAD over VPN

$

0

0

Hello.

We are monitoring windows insider preview to check in advance the updates that can cause incompatibility issues with our software and recently we have stumbled upon an unexpected issue: Internet Explorer (v11.1000.19608.0) can't reliably do https with a server if the latter requires clientAuthentication. When accessing the URL, IE is offering the user to pick up his personal certificate, as it always did before, than it asks for PIN to the smartcard with the private key, but then it is no guarantee that handshake will be successfully done - it may, and it may not, without any obvious predictability.

When such a handshake ends up unsuccessfully, we can see through server logs that client (IE) did not really provide user certificate (and TLS certVerify handshake message) in spite of fact that the certificate was chosen by the user and the PIN-code was provided.

As far as I can see, this first comes up with update specified in the title (10.0.19608). From our experience, older version, including all of the actual ones that are in circulation now don't show this kind of behavior.

It seems to me that there is smth with AcqureCredentialsHandle call, which no longer receives user certificate for SChannel credentials, even if certitifcate was chosen via GUI.

Can anyone direct me or suggest what am I doing wrong?

---

IE,windows help and support

November 30, 2013, 7:26 pm

≫ Next: MS Edge Version 81.0.416.64 How to accept an self-signed certificate

≪ Previous: TLS with clientAuth in Internet Explorer (ie11 / win10 insider preview 10.0.19608)

$

0

0

hello...

i used windows 7. last night when i want to shut down my laptop,windows was installed updates automatically. when i start up my windows and try to open IE browser,IE will automatically close. i try to launch it several times,but it still can't open that browser. i'm also try restart my windows three times but it still can't solve my problem. then i try to getting help with Windows Help and Support but that program also can't open. i think my windows got problem. hope Microsoft can solve my problem.

MS Edge Version 81.0.416.64 How to accept an self-signed certificate

April 26, 2020, 11:58 pm

≫ Next: Is there a memory limit in IE11?

≪ Previous: IE,windows help and support

$

0

0

Using an Synology NAS with DNS server local domain example.ns
Creating an self-signed certificate example.ns and export this certifcate
Open MCC and import - Trusted Root Certification Authorities - Certifates - example.ns - was succesfull.
In the Old MS Edge version my self-signed certificate was trusthed

MS Edge Version 81.0.416.64 Start my domain example.ns
Edge answer - Your connection to this site is not secure
I cannot find an solution for my problem

QST How to accept / trusthed my self-signed certificate again?

Can somebody help me out?

Thx Robert (PL)

Is there a memory limit in IE11?

January 13, 2016, 7:49 am

≫ Next: own PC and other PCs in home network not visible

≪ Previous: MS Edge Version 81.0.416.64 How to accept an self-signed certificate

$

0

0

We would like to know if there is some property that defines a maximum memory limit in IE11. If so, can we modify this property or somehow tell IE to use more memory?

Thanks

own PC and other PCs in home network not visible

April 30, 2020, 8:31 am

≫ Next: in Outlook 2016 I can no longer receive or send mails

≪ Previous: Is there a memory limit in IE11?

$

0

0

In explorer I see neither my own pc nor the others in the network anymore

in Outlook 2016 I can no longer receive or send mails

April 30, 2020, 8:39 am

≫ Next: Cannot read encrypted emails in OWA using IE 11

≪ Previous: own PC and other PCs in home network not visible

$

0

0

I  have uninstall office 2016, I tried everything

I try to send picture but I can't!

Body text cannot contain images or links until we are able to verify your account.

Cannot read encrypted emails in OWA using IE 11

May 1, 2020, 8:52 am

≫ Next: Can't Get Chromium Edge to Use IE Mode via GPO

≪ Previous: in Outlook 2016 I can no longer receive or send mails

$

0

0

Hello, 

Like many others, I am working from home utilizing my military CAC card to access OWA to read and write emails. I have the latest version of internet explorer installed w S/MIME controller but it still will not let me read or even open encrypted emails. When I open the email in a new window as prompted it seems to think that I don't have S/MIME installed. It also tells me "Your message couldn't be retrieved. Please try again later." I have researched this problem but have been unable to find any solutions. Any advice would be greatly appreciated. 

Scott

Can't Get Chromium Edge to Use IE Mode via GPO

May 4, 2020, 4:39 pm

≫ Next: IE 11 not using PAC file

≪ Previous: Cannot read encrypted emails in OWA using IE 11

$

0

0

Using Edge 81.0.416.68 64bit I am not seeing the IE blue "e" so I am apparently still running in Chrome mode on two sites that require Internet Explorer:

I have configured the two required GPO's:

and I have used the v2 builder to create the list:

which outputs what I was expecting:

<site-list version="5">
  <created-by>
    <tool>EMIESiteListManager</tool>
    <version>12.0.0.0</version>
    <date-created>05/04/2020 23:21:15</date-created>
  </created-by>
  <site url="tgs/POPS">
    <compat-mode>IE8Enterprise</compat-mode>
    <open-in>MSEdge</open-in>
  </site>
  <site url="tgs/sites/projects">
    <compat-mode>IE8Enterprise</compat-mode>
    <open-in>MSEdge</open-in>
  </site>
</site-list>

Edge is seeing the list:

and the registry looks fine (to me anyway :) ) 

I have tried several combinations of settings in the ENT MODE SITE LIST MANAGER but not succeeded.  

I simply want the two sites specified to open inside Edge in IE mode. 

As soon as that is done, I will block iexplore.exe from running on machines as a security improvement.

If you have any idea what I am missing or doing wrong, I would appreciate your comments and thoughts.

---

Ian Matthews www.urtech.ca www.commodore.ca

---

IE 11 not using PAC file

May 8, 2020, 12:30 am

≫ Next: How to make a Website should not load in Enterprise Mode

≪ Previous: Can't Get Chromium Edge to Use IE Mode via GPO

$

0

0

Hello,

I set proxy configuration with PAC file in system setting.

Every other browser use the setting but only IE is not using PAC.

Anyone has same issue?

OS is server 2019 IE 11 and some win 10 devices have same issue.

How to make a Website should not load in Enterprise Mode

May 8, 2020, 10:50 am

≫ Next: WindowsUpdate_00009C59" "WindowsUpdate_dt000

≪ Previous: IE 11 not using PAC file

$

0

0

Hi,

There is a website (https://myworldhr.contoso.com) which should work in corporate network and public network.  https://myworldhr.contoso.com was part of the "Use the Enterprise Mode IE website list".

It is removed from "Use the Enterprise Mode IE website list" and group policy is applied in the user computer. But https://myworldhr.contoso.com still loads in Enterprise Mode and in IE8  mode. 

If I uncheck from Enterprise Mode and change the mode to IE11 then it works. 

How to find that how the website loads in Enterprise Mode and IE8 mode? Please help.

---

Regards, Boopathi

WindowsUpdate_00009C59" "WindowsUpdate_dt000

May 9, 2020, 3:06 am

≫ Next: Win10 - IE11 - Can’t connect securely to this page error

≪ Previous: How to make a Website should not load in Enterprise Mode

$

0

0

Hi, My windows 7 SP1 fail to update from IE8 to IE11.

Anyone can help? What log I need to collect in order to help me?

Regards,

Bill Tan

Win10 - IE11 - Can’t connect securely to this page error

May 12, 2020, 1:09 am

≫ Next: Automatic Downloads Allow List for Edge

≪ Previous: WindowsUpdate_00009C59" "WindowsUpdate_dt000

$

0

0

I'm on Win10 1903. I'm able to access all internet and intranet pages usually but if my laptop goes to sleep mode something is happening. After I resume from sleep mode IE doesnt load most of the https internal sites as well as internet.

It gives following errors mostly, I have to reboot the laptop to get IE working proprely again; please advise

Can’t connect securely to this page error

INET_E_DOWNLOAD_FAILURE 

I have tried looking up various forums and tried enabling disabling ssl tls etc but doesnt help.

Automatic Downloads Allow List for Edge

May 13, 2020, 7:31 am

≫ Next: Compatibility site list setting would be reset on Windows 10 IE 11

≪ Previous: Win10 - IE11 - Can’t connect securely to this page error

$

0

0

I am needing to set a few sites for the "Allow" list within Site Permissions/Automatic Downloads within Microsoft Edge (v.81.0.416.72 64-bit).

Right now, am unable to find anything with Group Policy or the registry to get these listed automatically for users, and would like to prevent having to make each and every user do this for themselves.

Any thoughts/suggestions greatly appreciated!

Thanks!

-Bryan

---

Bryan M. Bolin

Compatibility site list setting would be reset on Windows 10 IE 11

May 22, 2020, 4:38 am

≫ Next: postMessage doesn't work in recent IE 11 browsers

≪ Previous: Automatic Downloads Allow List for Edge

$

0

0

Hi Microsoft Engineer 
Recently  i have deployed win10 with a boot script to add a site list to compatibility view setting
But this settings always be reset and the Compatibility site list always be removed 
My Windows version is Windows 10 professional 1909 ,and the default browser is Microsoft Edge
reference to Microsoft  documents "Make Microsoft Edge the default browser" i have made IE instead to be  the default browser
but when i add some Compatibility site list setting with script  it always effective temporarily but been reset after refresh 
so i come here for help 

postMessage doesn't work in recent IE 11 browsers

May 27, 2020, 9:06 pm

≫ Next: Make Favorites bar with GPO.

≪ Previous: Compatibility site list setting would be reset on Windows 10 IE 11

$

0

0

Hi, I have some problems in my project.

• parent window : a.a.com

• popup window: b.a.com

When I execute window.opener.postMessage(~~, *) in popup window, parent window can receive event depending on IE versions. (works in all Chrome versions)

version: 11.1.18362.0 / update version: 11.0.110 - works

version: 11.557.17763.0 / update version: 11.0.130 - works

version: 11.1158.17763.0 / update version: 11.0.185 - works

version: 11.1304.17134.0 / update version: 11.0.175 - doesnt work

version: 11.1425.17134.0 / update version: 11.0.185 - doesnt work

version: 11.1868.16299.0 / update version: 11.0.190 - doesnt work

I cant find any issues about it. Are there some changes associated with postMessage or CORS policy?

Thanks.

---

Make Favorites bar with GPO.

May 29, 2020, 8:59 am

≫ Next: CSS Position: Sticky; to keep a row /column of a HTML table frozen on a webpage when scrolling.

≪ Previous: postMessage doesn't work in recent IE 11 browsers

$

0

0

Hello. How i can make Favorites bar for all users with GPO?

CSS Position: Sticky; to keep a row /column of a HTML table frozen on a webpage when scrolling.

June 2, 2020, 6:58 am

≫ Next: my old email

≪ Previous: Make Favorites bar with GPO.

$

0

0

The below CSS property:value pair work for other browsers to keep a row /column of a HTML table frozen on the web page. But this does not work on IE. Is there an alternative way to do this on IE?

       position:-webkit-sticky;
       position:-moz-sticky;
       position:-ms-sticky;
       position:-o-sticky;
       position: sticky;

my old email

June 6, 2020, 10:26 am

≫ Next: Authentification Popup does not show up

≪ Previous: CSS Position: Sticky; to keep a row /column of a HTML table frozen on a webpage when scrolling.

$

0

0

I have just got anew pc and trying to get my email on this pc

Authentification Popup does not show up

April 14, 2020, 10:50 pm

≫ Next: signout application

≪ Previous: my old email

$

0

0

Hi

(sorry if on the wrong spot, but I didn't find an "Edge" Category) 

When I open a specific website, the authentication popup does not show up with the Microsoft Edge (Version 81.0.416.53). With Google Chrome, Mozilla Firefox and Internet Explorer, I got the popup immediately. Also, if I open the Website with Microsoft Edge on a private device, without any policy. So I assume, it could be a policy, which "forbid" that? Has someone got an Idea, why this could happen or "which policy" that behavior could explain?

Thanks for your Ideas :-)

David

signout application

June 11, 2020, 2:30 am

≫ Next: Whitelist Specific URL's From SmartScreen in both IE11 & CrEdge

≪ Previous: Authentification Popup does not show up

$

0

0

I am using O365 , run it on browser IE , chrome , I found that even I signout O365 ( even it pops I was signed out ) , it still online actually .

I know browser clear cache can help to clear the login information , but it is not user friendly .

Not only O365 has this problem , our other application has similiar problem .

Could advise what is the best way to fix it ?

thanks