views:

792

answers:

1

I have an application that is trying to load an ActiveX control residing in a signed cab file on the server. When I try to run the function that loads it, I'm stopped by the IE information bar with the following message:

In IE 6 & 7 - "Your security settings do not allow websites to use ActiveX controls installed on your computer" In IE 8 - "An add-on for this website failed to run"

When I look at the error file that gets dropped in the browser cache, it shows error 800b010b (Generic trust failure).

This is all happening in the Local Intranet zone, and I brought the IE security settings to minimal, enabling every option available. I later added the website to the Trusted Sites and set everything to Enable there too, no change.

These tests are on multiple machines, XP and Vista. I am logged in as an admin on all of them.

If I replace the cab file with one that I gave a dummy signature, it works. If I replace the cab file with one that is not signed at all, it works. If I try to run the one with a non-expired VeriSign signature, it fails.

At this point I'm not sure what to check. If anyone has a clue, I'd love to hear it.

A: 

Still getting the info bar message, the "Check signatures for downloaded programs" setting had no effect.

Unchecking the two 'check for ceritificate revocation' options did not help either, nor did checking 'Allow software to run or install even if signature is invalid'.

G H
This should be a comment on the previous answer, not a new answer.
EricLaw -MSFT-
Sorry, I missed the link for comments before. TO answer you questions above, the problem has been uncovered as a signing issue. There was a reference to javasign.dll in the parameter list which was creating a dependency on MSJVM at runtime. My test machines did not have MSJVM installed which is why it failed.
G H