link to UTHSC-H's home page

oac banner

[ UTHSC-H Home ] . [ Search Files ] . [ Administrative Documents ] . [ For Faculty/Staff ] . [ For Students ] . [ For LAN Managers ] . [ OAC A to Z ]


OnSiteMSI

Enabling End-User Machines with Windows 2000 and XP
Managed PKI uses ActiveX controls to streamline and automate functions in the certificate lifecycle.  The Windows 2000 and XP operating systems may prevent Managed PKI end users from installing ActiveX, thereby preventing them from enrolling for certificates or viewing other Web pages.  When an end user users Microsoft Internet Explorer to view a Web site that contains an ActiveX control in Windows 2000 and XP, Internet Explorer determines whether the end user has the appropriate permission to install and run the control before downloading it.  Internet Explorer does this by attempting to write to the HKEY_LOCAL_MACHINE registry hive.  If the attempt to write to the registry is unsuccessful, Internet Explorer does not download the control.

Members of the Users default group who have had a clean installation of Windows 2000 or XP (not an upgrade over Microsoft Windows NT 4.0 or Microsoft Windows 98) may not be able to download ActiveX controls and may experience errors with Managed PKI and Go Secure! for the Web Applications.  For example, these end users when attempting to renew their Managed PKI certificates might receive the following error message:

    Either your system administrator needs to install the OnSiteMSI script on your machine or the followinf fields on the previous page are not filled correctly.  Please correct the errors and resubmit.

To aviod ActivceX problems for users on Windows 2000 and XP platforms, VeriSign provides an MSI package that delivers all required ActiveX controls for Managed PKI and can ve installed in the end users' machines. The MSI package is called OnSiteMSI, and it is available in the ../sitekit/engine/ directory of the Managed PKI CD, or as a download from the Managed PKI Control Center's Download page.


link to OAC home page

link to oac services page

link to oac teams page


Updated April 22, 2003

Phone: 713.500.3501    7000 Fannin St., Houston, Texas 77030