We have found that Step 2b solution does not work reliably. If you use
Step 2a, you must select the trusted root store in IE7. It will not
automatically put the certificate into that store.

Bruce Osborne
Liberty University

-----Original Message-----
From: Cisco Clean Access Users and Administrators
[mailto:[log in to unmask]] On Behalf Of Dale Harville
Sent: Friday, September 21, 2007 10:32 AM
To: [log in to unmask]
Subject: Re: [CLEANACCESS] Revocation message with Vista and IE7

Just got this from TAC:
Here is an explanation and workaround to this problem:
http://www.cisco.com/en/US/products/ps6128/prod_release_note09186a008085
b16f.html#wp113835

I have tested this and it does resolve the issue.
TAC Case# 606895865

Dale Harville
Network Administrator
Infrastructure Operations
Galveston College Information Technology
4015 Ave Q
Galveston, TX. 77550
Voice: (409) 944-1356
Fax: (409) 944-1356
Email: [log in to unmask]
Monday-Friday 8:00am - 5:00pm CST
"Try not to become a man of success, but rather try to become a man of
value."   Albert Einstein

-----Original Message-----
From: Cisco Clean Access Users and Administrators
[mailto:[log in to unmask]] On Behalf Of Stanclift, Michael
Sent: Friday, September 21, 2007 8:53 AM
To: [log in to unmask]
Subject: Re: Revocation message with Vista and IE7

There is an option in IE7 under the security settings that you can turn
off that is something to the effect of "check for security certificate
revocation" that will stop the error from showing up. We have the same
problem though and have not been able to figure out why it happens.

I don't think the option is even available in IE6 and in IE7 on XP I
think it's already turned off by default.


Michael Stanclift
Network Analyst
Rockhurst University

Conway Hall, Office 415
1100 Rockhurst Road
Kansas City, Missouri 64110
(816) 501-4231


-----Original Message-----
From: Cisco Clean Access Users and Administrators
[mailto:[log in to unmask]] On Behalf Of Dale Harville
Sent: Friday, September 21, 2007 8:34 AM
To: [log in to unmask]
Subject: Revocation message with Vista and IE7

I have Clean Access Version 4.1.2.1 running in-band mode.  Whenever a
student with a Windows Vista laptop running IE7 connects and after the
password has been verified, they get a message "Revocation Information
for the security Certificate for this site is not available.  Do you
want to proceed?" No mater how many times they hit yes, they never get
past this screen.  IF they close the box, they are thrown into the
temporary access group.  Laptops running Windows XP and IE6 work just
fine.  Any idea why this is?

Dale Harville
Network Administrator
Infrastructure Operations
Galveston College Information Technology
4015 Ave Q
Galveston, TX. 77550
Voice: (409) 944-1356
Fax: (409) 944-1356
Email: [log in to unmask]
Monday-Friday 8:00am - 5:00pm CST
"Try not to become a man of success, but rather try to become a man of
value."   Albert Einstein