Access Keys:
Skip to content (Access Key - 0)

VBScript error when obtaining certificates in Internet Explorer - fix underlying permissions issue

Question

I am trying to obtain an MIT personal certificate in Internet Explorer, and getting an error:
VBScript error

Simplest solution

Note: For the simplest solution to this issue, obtain your certificates using the CertAid Tool for Internet Explorer.

Command Line solution

There is a Windows command that can be used to address the underlying permissions issue that causes the VBScript error message. Execute the following from a Command Prompt:

 cacls "%appdata%\Microsoft\Crypto\RSA" /t /e /c /g "%username%":f

Steps for addressing the underlying permissions issue that causes the VBScript Error

Important note for Windows XP Home users:

If you use Windows XP Home edition you will have to restart the machine in Safe Mode first to have access to the security tab.
(Simple File Sharing is on by default).
To start in Safe Mode, restart the machine and press F8 when Windows starts. Choose Safe Mode from the menu.
Log on with to Windows and follow the instructions below from step 1 through 5. Then continue with step 8.

  1. Open Windows Explorer: right click on Start and choose Explore:
    Select windows explore

    Result: Windows Explorer opens.
    Windows Explorer screen

  2. Click on Tools and choose Folder Options from the drop down menu:
    Tools menu

    Result: The Folder Options window opens.
    Folder options screen

  3. Go to the View tab and in the Advanced Settings section check the radio button for show hidden files and folders
  4. In the same section uncheck the box for "hide protected operating system files (recommended)".
    Advanced settings screen

  5. Answer Yes when you receive the Warning message:
    Display operating system files message

  6. Scroll all the way down to the bottom of Advanced Settings section and uncheck the box for Use Simple File Sharing(Recommended).
    Advanced settings

  7. Click Apply to save the changes and OK to close the Folder Options window.

  8. In the main Windows Explorer expand the folder list and browse to the following location:
    C:\Documents and Settings\<username>\Application Data\Microsoft\Crypto\RSA
    where <username> needs to be replaced with the actual Windows username.
    RSA folder screen

  9. Right click on the RSA folder and choose sharing and security from the drop down menu.
    RSA alternative actions menu

    Result: The Properties window will open.
    RSA properties window"

  10. Select the security tab, and click on Advanced.
    Security tab screen

    Result: The Advanced Security settings window opens:
    RSA advanced security settings window

  11. Check the box Replace permission entries on all objects with entries shown here that apply to child objects.
  12. Click Apply to save the changes and OK to close the Advanced Security Settings.
  13. Close all Windows Explorer windows and go back to Internet Explorer to obtain a personal certificate.

IS&T Contributions

Documentation and information provided by IS&T staff members


Last Modified:

April 25, 2016

Get Help

Request help
from the Help Desk
Report a security incident
to the Security Team
Labels:
ie ie Delete
vb vb Delete
script script Delete
ie-cert-issue ie-cert-issue Delete
c-ie-certs c-ie-certs Delete
certificate certificate Delete
internet internet Delete
explorer explorer Delete
vbscript vbscript Delete
error error Delete
Enter labels to add to this page:
Please wait 
Looking for a label? Just start typing.
Feedback
This product/service is:
Easy to use
Average
Difficult to use

This article is:
Helpful
Inaccurate
Obsolete
Adaptavist Theme Builder (4.2.3) Powered by Atlassian Confluence 3.5.13, the Enterprise Wiki