How do I uninstall Comodo and start again

[NewsArchive]

After 3 weeks of frustration, last week Comodo finally sent a certificate
which they revoked a day later as they wanted me to send the same email
address as the original was issued. So I did that, backed up my key and
attempted to install the newer certificate but it has failed with the
attached errors. I am using the same pc and OS to order the certificate and
install. Clearly something is wrong. Is it possible to remove all traces of
Comodo certificates and just install the latest without error?
Thanks
Nev

[NewsArchive]

Nev,

As far as I can see, you are using an UAC-aware (Windows 7?) operating
system. So there is no .PVK (private key) file on your computer.

Here is one similar Comodo support request, but I don't think that it is
helpful:

http://forums.comodo.com/help_for_comodo_secureemail/cant_collect_certificate-t27552.0.html

You have to open a ticket with Comodo.

Friedrich

[NewsArchive]

Thanks Friedrich
I do have the 2011 pfx still installed and visible in IE but being out of
date it will not sign. I'll try Comodo again..... and probably again also.
Nev

[NewsArchive]

Hi Nev,

> I do have the 2011 pfx still installed and visible in IE but
> being out of date it will not sign. I'll try Comodo again.....
> and probably again also.

Yes, you have a .PFX but this is not your private key file. You only have a
private key .PVK on non-UAC-aware systems. A .PFX can't be used to collect
your new certificate.

Friedrich

[NewsArchive]

Thanks again. You appear to be saying to turn off the UAC to get the pvk. Is
that correct?

Neville Wright

[NewsArchive]

> Thanks again. You appear to be saying to turn off the UAC to get the pvk.
> Is that correct?

No. Microsoft does not support the retrieval of certificates in form of
..spc/.pvk any longer on modern operating systems.

It depends on your browser (IE, Firefox, Chrome, etc.). Sometimes you'll
directly receive a .pfx or .p12 file, sometimes you have to export it from
your certificate store into a .pfx.

Friedrich

[NewsArchive]

Well I knew it was going to be hard but this next is ridiculous. Comodo have
asked me go request a new key and suggest I click on Continue to have the
browser generate the new key. My screen is set to 1980 by 1400, it's maximum
and I still get to the bottom of their form which does not have a scroll
button. Tried a number of hot keys just in case, including CtrlEnter but no
joy. This has been reported back to Comodo. Am now in my 4th week of
frustration.

Neville Wright

[NewsArchive]

Hi Nev

Try the CTRL- - (Controlkey and the MinusKey at right of numeric pad.) That should
reduce the font displayed and thus show all the form.

JohnG

[NewsArchive]

Lifesaver! Looked everywhere to reduce the font size. Completely forgot that
one!
All done.
Have a good one John
Nev

[NewsArchive]

Thought it was all over. Installed correctly into IE10 but will not export
in .pfx format only .cer or .pb7. I do not know how to use them with
Signtool.
Nev

[NewsArchive]

Hi Nev

The .pb7 file is the one you want. Just rename it with extension .pfx and you will be
good to go.

JohnG

[NewsArchive]

Did that john but Signtool reports
Error: No certificates found that meet all the given criteria.
Nev

[NewsArchive]

Hi Nev

Well I just looked at mine, and it exported as a .p12 which I simply renamed as .pfx

I think you can do the same with .pb7 -> .pfx.

John

[NewsArchive]

I might be wrong, but I think the certificate in question has its private
key flagged as "non-exportable" (enabled by default when you request the
certificate). The Cryptographic Service Provider (CSP) will not allow that
key to be moved.

..p7b (PKCS#7) does not include the private (key) part of a
certificate/private-key pair.

Friedrich

[NewsArchive]

Just heard from Comodo who claim I must have used another [c to order the
certificate but that is not true. Now they have to validate the certificate
again and will let me know when it is available.
Nev

[NewsArchive]

> Sometimes you'll directly receive a .pfx or .p12 file,
> sometimes you have to export it from your certificate store into a .pfx.

Sometimes!

Now try to imagine the face I am doing.

And its no funny face.

<gnarlgnash>



Wolfgang Orth
www.odata.de

[NewsArchive]

Hi Wolfgang,

> Now try to imagine the face I am doing. And its no funny face.
> <gnarlgnash> Wolfgang Orth www.odata.de

Those certification companies have become almost as bad as the patent
trolls:( Take your money and make your life difficult. Until some big
company with very deep pockets gets tired of paying the certificate
ransom and decides to bring this mess into the 20th century (I have no
hope for the 21st, but 20th will do for now;) this is only going to get
worse.

Merry Christmas everyone:)

Best regards,

--
Arnor Baldvinsson - Icetips Alta LLC

[NewsArchive]

Finally it is over. Their new certificate exported perfectly. Same pc as
before. A total of 36 days.

Neville Wright

[NewsArchive]

Yay!

Jeff Slarve
www.jssoftware.com
www.twitter.com/jslarve
I'll search help files & Google for you.

[NewsArchive]

> Finally it is over. Their new certificate exported perfectly. Same pc as
> before. A total of 36 days.

Hopefully you bought more than the one year certificate so that you don't
have to repeat this process for a while!


:-)

Charles



--
-------------------------------------------------------------------------------------------------------
Charles Edmonds

cjeByteMeSpammers@lansrad.com (remove the "ByteMeSpammers" to email me)
www.clarionproseries.com - ProScan, ProImage, ProPath and other Clarion
developer tools!
www.ezchangelog.com - "Free ChangeLog software to manage your projects!"
www.setupcast.com - "A revolutionary new publishing system for software
developers - enhanced for SetupBuilder users!"
www.pagesnip.com - "Print and Save the Web, just the way you want it!"
www.ezround.com - "Round Corner HTML tables with matching Banners, Buttons
and Forms - Now with PNG support!
www.lansrad.com - "Intelligent Solutions for Universal Problems"
www.fotokiss.com - "World's Best Auction Photo Editor"
-------------------------------------------------------------------------------------------------------

[NewsArchive]

Three years Charles. Have a good one for the Chrissie break.

Neville Wright

[NewsArchive]

> Three years Charles.

Good man!

> Have a good one for the Chrissie break.

Thanks - you too!


:-)

Charles



--
-------------------------------------------------------------------------------------------------------
Charles Edmonds

cjeByteMeSpammers@lansrad.com (remove the "ByteMeSpammers" to email me)
www.clarionproseries.com - ProScan, ProImage, ProPath and other Clarion
developer tools!
www.ezchangelog.com - "Free ChangeLog software to manage your projects!"
www.setupcast.com - "A revolutionary new publishing system for software
developers - enhanced for SetupBuilder users!"
www.pagesnip.com - "Print and Save the Web, just the way you want it!"
www.ezround.com - "Round Corner HTML tables with matching Banners, Buttons
and Forms - Now with PNG support!
www.lansrad.com - "Intelligent Solutions for Universal Problems"
www.fotokiss.com - "World's Best Auction Photo Editor"
-------------------------------------------------------------------------------------------------------

[NewsArchive]

if you had to recap all :
where did the extra time come from ?????
what steps did you (or comodo) miss to get the cert registered properly
in a normal delay ?

--
JP
__________________________________________________ _____

For those who do not understand ... : "Qui bene amat bene castigat."
__________________________________________________ _____

DMC - Data Management Center : a tool to let you Migrate Import Export
Transfer your Data
www.dmc-fr.com

[NewsArchive]

Merry Christmas JP.
They kept saying I was saving not on the machine it was ordered from but
that was after they kept insisting that my email was invalid. Finished up
moving my website to another host because I found that the original hosts IP
was blacklisted due to one of his clients spamming. That took three days to
fix. Then they insisted that my company information with their credit
reporting company did not match that which I was supplying. After phoning
that company and requesting that they update my information to what it has
been for the past 15 years, was I able to proceed. One minor glitch after
the other. I asked them how come the same CR company reported on my company
3 years back and they accepted it then but not now. And of course due to
time differences it was a 24 hours cycle from one request to the next. They
need an office in Australia.

Neville Wright

[NewsArchive]

Merry Xmass nev !
All in all :
your website rejected their emails
your infos where not upto date or at least matching

add indeed a 24 hours reply time for each request and you easily get
fooded with "why the zeck !!!'s" <g>

--
JP
__________________________________________________ _____

For those who do not understand ... : "Qui bene amat bene castigat."
__________________________________________________ _____

DMC - Data Management Center : a tool to let you Migrate Import Export
Transfer your Data
www.dmc-fr.com