Personal Certificates |   Class 2 Cerificates
Technical FAQs


For some of the problems faced by IE 5.x users during key pair generation and (or) certificate download, Microsoft has released Service Packs and Fixes. Kindly download the latest Service Packs and Fixes before generating the key pair.



Technical
Error Message: "VB script errors"

A Visual Basic script is responsible for generating your private/public key pair. If you set your Internet Explorer security preferences to "High" (under the Security tab), this might cause problems initializing the variables needed for the VB Script. Setting the security level to "Medium" should solve the problem.

Follow these instructions:

1. Go to View | Tools > Internet Options > Security.
2. Change the Security Settings to 'Medium'.
3. Check that Active X and Java Scripting is enabled.

Error Message: "-2146885628" when retrieving your certificate

Internet Explorer reports that it cannot find the Private Key corresponding to the certificate you are downloading. Please ensure the following to download the certificate properly.
  • Ensure that you are using the same user profile/machine that you used to submit the certificate request. The key is 'attached' to that user account.
  • Ensure that you are using the same smart card/token to download the certificate through which you have generated the key pairs.
  • Ensure that the browser or operating system software has not been reinstalled.
  • Ensure that you have not re-initialized the smart card /token.
Error Message: "Windows cannot determine the validity of this certificate because it cannot locate a valid certificate revocation list from the CA which issued the certificate"

Microsoft Internet Explorer has the Certificate Revocation List (CRL) Checking option enabled. In order to avoid this error message, you need to manually download the TCS-CA CRL and install in the browser or disable this option in Internet Explorer.

Please execute the following steps to disable the option in IE.

1. View | Tools > Internet Options > Advanced > Security.
2. Deselect 'Check for Publisher's Certificate Revocation'.
3. Close and reopen the browser.
Error Message: "Windows does not have enough information to verify this certificate"

The browser does not have the TCS-CA and (or) CCA certificates installed and as a result cannot verify the signature in the certificate. To resolve this, you need to install the TCS-CA and CCA certificates.

Errors Message: "80092023 or 80092024"

This error often occurs when the private key cannot be generated. This is typically the result of a comma (,) in the 'Distinguish Name' supplied while filling up the online form. To solve the problem, remove the comma and re-apply.

No option to choose from in the Cryptographic Service Provider (CSP) list

VB script captures the contents of the Cryptographic Service Provider (CSP) list from your browser. If you do not have Visual Basic Scripts installed, your browser will not be able to provide that information and hence the CSP list will be empty. In order to get the option to choose the CSP you have to enable scripting in your browser by executing the following steps:

1. View | Tools > Internet Options > Advanced.
2. Check all boxes related to scripting.
3. View | Tools > Internet Options > Security > Custom Level.
4. All the settings under 'Scripting' need to be enabled.