WCS .NET 3 June CTP and IE7

WCS .NET 3 June CTP and IE7

• RCamille

  Is the Trusted People bug only relevant for logins in websites via IE7, or does it also affect WCF wsHttpFederationBinding clients
  
  

• Student_I

  http://sts.labs.live.com/ does not presently support the June CTP of WinFX, we are working on an update to the site that should be released in the near future.

  The issue with the Trust People store is a known bug in CardSpace in the June CTP; this bug affects X.509 certificate CRL checking and results in CardSpace thinking that the certificate is not trusted. It has been fixed in later builds of the product. In the meantime, the workaround is to install the site / service certificate into your CurrentUser / Trusted People store.

  If you experience problems launching the CardSpace UI, it's always worth checking the event log for additional information. If the error indicates that the UI could not be initialized and you also see multiple instances of the icardagt.exe process on your machine, then you've run into another known process management bug. This has also been fixed in later builds. The workaround for this issue is to kill all the running icardagt.exe processes using, for example, the Task Manager, then do "net stop idsvc" from a command prompt and try again.

  
  
  

• tattoo

  I tried to login at Kim Cameron's web site with the June CTP and it seems to work. I can select a card and submit it. After that, I get to the page that says that a validation e-mail has been sent.
  
  

• Ofir Epstein

  Yes, that's the version of IE I'm using.

  My system was upgraded from beta 2 though, not from the Feb CTP.

  I received the confirmation e-mail from Kim Cameron's web site, so I'm pretty sure InfoCard is working.

  And I'm sure I'm using the June CTP because the identity selector UI changed significantly compared to beta 2.

  Are you running under the same account you used to install WinFX I've had machines (with beta 2) where InfoCard didn't work when using a different account than the one WinFX was installed with.

  
  
  

• setareh

  I have no certificates in my Trusted People store but Infocard does work. Besides, that change would make it very annoying to us Infocard.
  
  

• Milzit

  I tried it now on my Windows XP box and it doesn't work.

  I see different behavior in IE compared to before installing the June CTP: IE now asks me if it is ok to go to https://www.identityblog.com (a site that is in my trusted site list), I don't remember it doing that before.

  If I then click on the infocard login button, I get redirected to the home page, no login happens. Adding the certificate to the Trusted People store doesn't help either. Besides, even if it did work that way, it's a very bad user experience. How's a normal user supposed to know he has to do this There's not a single hint that this is the way it's supposed to work.

  So the behaviour I'm seeing is very much different in XP compared to Windows 2003 (Web Edition).

  
  
  

• brian_tsim

  Nico,

  It seems you're the only one that succeeded in selecting and sending an infocard. Since your post, I've made an install on Windows server 2003 (SP1) upgraded from winfx the Feb CTP to the June CTP. It doesn't run too. I can create a personal card but when I want to use it into Kim Cameron's blog or Live Labs STS website, the selector just flashes and then disappears.

  Are you using the last IE7 i.e. build 7.0.5346.5

  
  

• Jon Watte

  I ran it on Windows 2003 server, upgraded from beta2 to the June CTP.
  
  

• Stormin Norman

  This is on a fresh install on a Windows XP SP2 machine. No prior WinFX/.NET 3.0 installations.
  
  

• BigErn782

  I also had problems authenticating with the Microsoft Live Labs STS web site using the my card.
  
  
  

• SnowJim

  The solution proposed by CountryKING solves the problem, but it's clear it's a workaround. The question is why I have to do that and Nico not for example
  

• Dong Xie

  You have to add the site's certificate, where you are trying to use InfoCard at, to the Trusted People certificate store. This is a change compared to the previous beta versions where the root certificate of the site's certificate chain had to be in the computer's Trusted Root Authorities store.

  To add the certificate to the Trusted People store

  1. Go to the site where you want to use InfoCard and click on the lock symbol in IE7's address bar.
  2. Click View Certificates
  3. Click Install Certificate
  4. Click Next
  5. Select Place all certificates in the following store
  6. Click Browse to select the Trusted People store
  7. Click Next
  8. Click Finish

  
  

• VMahaadevan

  Can you precise your install

  • Fresh install
  • OS: XP SP2, Windows Server 2003, Vista
  • IE7 build

  
  

• MShanahan

  Just tried on machine with a fresh install of the June CTP and having the same issues. Kim Cameron's blog not triggering the Identity Selector and the Live Labs STS just cause the selector to flash and then dissappear.
  
  The error I'm getting for the STS is:
  The recipient certificate specified is not valid or trusted.
  Inner Exception: The X.509 certificate CN=relay.labs.live.com, OU=Connected Framework, O=Microsoft, L=Redmond, S=Washington, C=US is not in the trusted people store..
  
  
• WCS .NET 3 June CTP and IE7