Forum Discussion
Advanced Certification Request in Edge Chromium
saraalex - I'm afraid you're having a very different and unrelated problem with your website. The problem being discussed in this thread isn't related to trouble with websites on the internet not working correctly in the Edge browser, so you'll need to seek help with that on another post or forum related to whatever the problem is that you're having with Edge on your website. You might be better off seeking help for that kind of issue on one of the website developer help forums, as the users on those sites will have a lot more experience in that area.
I can tell you that the certificate for your website was issued by Cloudflare on July 10th, and there are no problems with your website certificate according to the certificate checkers at sslshopper.com, digicert.com, thesslstore.com, or Qualys' ssllabs.com, and Cloudflare doesn't use the Windows Certificate Authority for issuing those certificates. If you were having the problem we're discussing here, you wouldn't have a certificate on your website because you wouldn't be able to get one in the first place because of this issue.
What we're talking about here is a problem with the Microsoft Windows Certificate Authority product that's built into Windows Server, which still requires using Microsoft Internet Explorer for some of its functionality despite Microsoft having retired Internet Explorer and no longer shipping it with any of the latest versions of Windows. Their current certificate authority product is not compatible with any currently supported web browser available in their latest operating systems despite that product still being shipped in their latest operating systems with that requirement. It's a catch-22 for Windows server and network administrators who use the Windows Certificate Authority product.
I hope that helps.
- NickF101Aug 03, 2022Copper Contributor
It's crazy that a core Microsoft security-related application still has an ActiveX dependency in 2022
- Keith_DAug 04, 2022Copper Contributor
NickF101 It's not actually an ActiveX dependency - you can disable ActiveX completely in IE and this will still work. It's the authentication mechanism used by the Certificate Authority's webpage. Edge doesn't support that authentication mechanism and neither does any other browser but Internet Explorer.
The setting in Internet Explorer is in Internet Options -> Security -> Custom Level... -> User Authentication -> Logon (scroll to the very bottom of the list). It requires one of the options that allows you to authenticate through the web browser to the server so it can perform the CA operations under your AD credentials. This is not supported in anything but Internet Explorer to my knowledge, and I haven't ever found any documentation from Microsoft on how to replicate this functionality in any other way for the Certificate Authority's web interface.