Unable to open archived items via Archive Explorer or Enterprise Vault search. Error message: 'Revocation information for the security certificate for this site is not available'.

Problem

When accessing archived items using Enterprise Vault Search or Archive Explorer, the following error message is generated in the banner of the message: Revocation information for the security certificate for this site is not available.

Error Message

[Error in Archive Explorer or Enterprise Vault Search]


There was an error loading this item -- some functionality may not be available.


When clicking on the banner the following Pop Up appears:
 

 

When you proceed by answering yes, you will be either prompted for a login or immediately see the following Pop Up:

Could not show this item.
Please try again; if it still fails, contact your Enterprise Vault administrator.

 

 

 


[Client Trace]

 

A MAPI error will be generated in the client trace log.

~CDownloadSTA::DoDownload: 0x80072F19
(0x80072F9 = ERROR_INTERNET_SEC_CERT_REV_FAILED)

Cause

When opening un-archived messages from Outlook, Outlook items open OK, but archived items fail due to a certificate of authority revocation issue. Since the Enterprise Vault archives are opening through Outlook, Enterprise Vault is depending on Outlook to check security. When proceeding from the login prompt, the item is opened. This is because the access is being accomplished using "HTTP" only.

Solution

There are three options to fix this issue:

Option 1
Ensure that the revocation information for the security certificate for the front end server is available outside the internal domain.

Option 2
Uncheck the Check for server certificate revocation and Check for publisher's certification revocation options in Internet Explorer:

  1. Click on Tools.
  2. Select Internet Options.
  3. Click on the Advanced tab.
  4. Scroll down to the Security section.
  5. Uncheck Check for server certificate revocation and Check for publisher's certification revocation.

NOTE: This is unsecure and, in Internet Explorer 7, the Check for server certificate revocation does not remain unchecked.

Option 3
Instead of using a local Certificate of Authority, purchase a Public Certificate of Authority that can be available outside the internal domain.

 

 


Terms of use for this information are found in Legal Notices.

Search

Survey

Did this article answer your question or resolve your issue?

No
Yes

Did this article save you the trouble of contacting technical support?

No
Yes

How can we make this article more helpful?

Email Address (Optional)