(Critical issue) Correspondence for Illegal SSL Certificates

Users.

Information Processing Office already informed about this issue at (Critical issue) Firefox 6.0.2 and Thunderbird 6.0.2 Released. However, I think that the influence area is very large scale, so in case of famous web browsers and e-mail softwares, I summarized below about the measure.

There are two approaches three steps for solving this issue.

[Step 1]: OS

• WindowsXP
  1. Access to Microsoft Update, and select “Custom” button.
  2. Click “Software, Optional” in the left side menu. And Select  “Update of Root Certificates” and Install it in “Review and install updates”.
     * If there is not “Update of Root Certificates”, Internet Explorer uses latest version of Root Certificates.
• Windows Vista/7の場合
  1. Access to Microsoft Update. If “Check for Updates” button is displayed, please click this button. appear and check.
  2. Click “XXX importants are available” link. And Select “Update of Root Certificates” and Install it.
     * If there is not “XXX important are available” link or  the update called “Update of Root Certificates”,  your Internet Explorer uses latest version of Root Certificates.
• MacOSX
  1. Select “Software Update” in the Apple menu of upper apple icon.
     * If there is not security update, Safari uses  latest version of Root Certificates.

[Step 2]: Web Browser

• Internet Explorer 6 (for Windows XP)
    There is not measure about this version. I’d like to upgrade new version (Internet Explorer 8).
• Internet Explorer 7
  1. “Tool” –> “Phishing Filter” –> Click “Turn On Phishing Filter”.
     * If “Turn Off Phishing Filter” is displayed, the filter is already turned on.
• Internet Explorer 8
  1. “Safety” –> “SmartScreen Filter” –> Click “Turn On SmartScreen Filter”.
     * If “Turn Off SmartScreen Filter” is displayed, the filter is already turned on.
• Internet Explorer 9
  1. “Gear icon” –> “Safety” –> “SmartScreen Filter” –> Click “Turn On SmartScreen Filter”.
     * If “Turn Off SmartScreen Filter” is displayed, the filter is already turned on.
• Firefox 6 / Thunderbird 6
  　First of all, please install latest version by accessing to http://mozilla.org . If latest version is 6.0.2 on September 11, 2011. Above Firefox 5 / Thunderbird 5, there is the auto update’s function. Please check whether this option is turned on or not.
  1. “Tool” –> “Options” (In case of MacOSX, “Firefox” menu –> “System Settings”.)
  2. “Updates” menu in “Advanced” menu.
  3. Turn on “Automatically download and update”

  * If you’d like to manually update immediately, please check the “About Firefox” in “Help” menu.
     (In case of MacOSX, please check “About Firefox” in “Firefox” menu.

• Google Chrome
  　Basically, the operation for updating is not needed because the web browser forcibly updates without notice.
  • * If you’d like to manually update immediately, please check the “About Google Chrome” in “Help” menu.
       (In case of MacOSX, please check “About Google Chrome” in “Chrome” menu.

[Step 3]: Software using SSL certificate

• Adobe Reader (Free) / Acrobat (Product)  <Added on September 16, 2011>
  • By updating latest version, please select “Check for Updates” in “Help” upper menu after Adobe Reader /Acrobat is started up.
  • About how to check software version, please select “About Reader / Acrobat” in “Help” upper menu.
      * In case of Mac, please select “About Reader /Acrobat” in “Acrobat” upper menu.
  • Latest version on September 16, 2011
      10.1.1 / 9.4.6 / 8.3.1
  • If you use version 8, please consider to upgrade new version 10 called “X” as soon as possible because the support of this version will be stopped on November 3, 2011.
  • * If you use an older  free version called  “Adobe Reader” than 10 (X),  you had better download latest version from http://www.adobe.com and install it. By installing new version, the old version will be overwritten.  I think that the approach is quickest operation for upgrading.
• Adobe Flash Player   <Added on September 16, 2011>
   Please see  Adobe Flash Player 10.3.183.7 Released . 
   * If the update is failure, please see (Attention) Cannot get new Adobe Flash Player to upgrade.

 12th September, 2011  Chief of Information Processing Office: Kitani
16th September, 2011: Addition of Step 3.