private key container message box

[Brodie]

When our web site is visited, users receive a private key container message
box when they first visit the site and numerous times when they navigate
around the site. The warning states, "Signing data with your private exchange
key! ... Security level set to medium."

I do not receive the message. However, I am on version 5.5 of IE. Is there
a way to get rid of this message box. I assume it's an IE setting, but I
wonder if could be an NT or IIS setting.

Please help. Thanks.

[Michael Howard]

technically, this is a CAPI issue, not ie. the dialog is doing the right thing
and is to help mitigate the risk of a rogue app signing something "On Your
Behalf" if you get my drift!

you can disable it at the point you import the private key and cert. If you
have already installed the key/cert then export it from ie, then reimport
it and do no choose the "enable strong private key protection" of course
this is a Very Bad Thing (tm) but it's your key!

btw export the key as a PFX/PKCS#12 blob and make sure your include the key.

all this stuff can be found on the internet options | content | certificates
dialog.



"Brodie" <brodie_ou@yahoo.com> wrote:
>
>When our web site is visited, users receive a private key container message
>box when they first visit the site and numerous times when they navigate
>around the site. The warning states, "Signing data with your private exchange
>key! ... Security level set to medium."
>
>I do not receive the message. However, I am on version 5.5 of IE. Is there
>a way to get rid of this message box. I assume it's an IE setting, but
I
>wonder if could be an NT or IIS setting.
>
>Please help. Thanks.