Forum Discussion
Advanced Certification Request in Edge Chromium
Hi,
I am trying to request advanced certificate from certification authority via Edge Chromium (version 83.0.478.58). The CA supports only http connection. I am connecting to CA in IE mode. The CA is in the Intranet zone. When I clicked on the link "Create and submit a request to this CA" the information "The Web site is attempting to perform a digital certificate operation on your behalf...." was not displayed and on the page with Advanced Certificate Request the CSP field did not display providers there was only Loading message. In IE on the same computers everything works fine. Could you please give me some advice how to solve this issue in Edge Chromium?
- Hi,
I don't think the IE mode inside Edge supports the intranet sites settings. though you can request your certificate in the normal Edge mode, i.e without going through the IE mode.- VjekoVCopper Contributor
HotCakeX thank you for response.
In normal Edge mode when I clicked on advanced certificate request I was directly redirected to "Submit a certificate request by using a base-64-encoded CMC or PKCS #10 file, or submit a renewal request by using a base-64-encoded PKCS #7 file. " page.
The page where I have option to select "Create and submit a request to this CA. " or "Submit a certificate request by using a base-64-encoded CMC or PKCS #10 file, or submit a renewal request by using a base-64-encoded PKCS #7 file. " was not displayed.
- AndresPaeBrass Contributor
I think this is technological limitation of Edge Chromium, it doesnt support needed technology (ActiveX).
The Web Enrollment role hasn't goten virtually any update since WS 2008 , seems development of it is pretty abandoned. Just keep some IE's.
https://docs.microsoft.com/en-us/troubleshoot/browsers/csp-shows-loading-for-certificate-request
- VjekoVCopper Contributor
Thank you for response. We are trying to simplify environment as much as possible but it seems that vision to have only one web browser is not realistic.
- AndresPaeBrass Contributor
VjekoV I got little more information from MS.
Indeed - the webpage hasnt gotten any recent updates to make it compatible with Edge. Currently IE engine is present on all supported MS Windows OS'es , and remains there until lifecycle ends. So "easy" solution is to remeber to open certificate enrollment page always with IE. If You need more Enterprise solution - You should investigate Edge IE Enterprise mode ( which allows automatic redirection/opening of listed sites in IE) - https://docs.microsoft.com/en-us/internet-explorer/ie11-deploy-guide/enterprise-mode-overview-for-ie11
- Keith_DCopper ContributorWhy is this still not addressed? Every time I perform a certificate operation, I'm reminded that support for IE is ending June 15, and Edge still doesn't perform this task. Is Microsoft asleep at the wheel on this? How are they retiring a security-critical dependency without replacing it? IE 11 was released in 2013 so they've had nearly TEN YEARS to solve this or to document whatever replacement they've implemented to those still dependent upon an expiring product. Please tell me that I'm the one being stupid and just missing the answer somehow?
- rlcm58Copper Contributor
Keith_D I wish you were wrong and a solution would have been published. However, I too am in this same situation where I have a major dependence upon the MS internal CA and would really like to have an easy way for us to continue using this service. A replacement has been avoided due to the institutional impact and complicated change management. If there is any update on this I would really appreciate a follow-up post.
- saraalexCopper Contributori have same issue my website not open well in microsoft edge with ssl https://www.mp3juice.blue/ can you please take a look here what is issue