Super User is a question and answer site for computer enthusiasts and power users. It's 100% free, no registration required.

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

On one of my Win 7 (x64) computers I frequently get certifcate revocation dialogs. Most of them are somehow Java related, once in a while I get one for Xmarks.

My main question is, what is the correct way to handle it? Click just YES, install the certificate, .. ?

I wonder about some details as well:

  1. Why I do not get the same dialogs on my other Win 7 machines, Java / XMarks installed as well. They should have the same certificates as well, should't they?
  2. Why are there so many revocations with Java? The dialogs pops up around 1-2 times a week.

Java revocation

XMarks revocation

share|improve this question
up vote 1 down vote accepted

This might depend on the Windows 7 version/edition and on the Certificate Revocation Settings: (the group policy editor is not available in Home editions. It requires a professional edition of Windows 7)

Configuring revocation settings on a local computer

Administrators is the minimum group membership required to complete this procedure.
To configure revocation settings on a local computer

    Click Start, type gpedit.msc in the Search programs and files box, and then press ENTER.

    In the console tree under Local Computer Policy\Computer Configuration\Windows Settings\Security Settings, click Public Key Policies.

    Double-click Certificate Path Validation Settings, and then click the Revocation tab.

    Select the Define these policy settings check box, select the policy settings that you want to apply, and then click OK to apply the new settings.

Steps copied from Microsoft Technet.

share|improve this answer

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.