After enabling session encryption, GOLD may present a "Warning T02" error message and not launch.  Here is a screenshot of the error:



If you encounter this error message, there may be an issue with your workstations local certificate store.  We have identified a few possible causes.  Typically, your workstation has several expired certificates in the store that are causing conflicts; or your workstation does not have the correct GoDaddy intermediate certificates.  Follow the steps below to correct these issues.

Follow these steps to remove the expired certificates from the Windows certificate store.  It is recommend to try this first before reinstalling the GoDaddy certificates:
  1. Ensure you are logged into the workstation with administrative privileges
  2. Open the Microsoft Management Console
    1. Click on "Start"
    2. Click on "Run"
    3. Type in "mmc" (without quotes)
    4. Press "OK"
  3. Load the Certificates snap-in
    1. Click on "File"
    2. Select "Add/Remove Snap-in"
    3. Highlight "Certificates" on the left
    4. Click "Add >" in the middle
    5. In the new dialog box, select "Computer account"
    6. Click "Next"
    7. Click "Finish"
    8. Click "OK"
  4. Locate and remove expired certificates from the Trusted Root Certification Authorities store
    1. Expand "Certificates (Local Computer)" on the left
    2. Expand "Trusted Root Certification Authorities"
    3. Click on "Certificates"
    4. In the list on the right, sort by the expiration date
    5. IMPORTANT: Do NOT remove any certificates that are still current!
    6. For each certificate that is expired, remove them by right clicking on each and selecting "Delete."  Select "Yes" on the confirmation.
    7. Alternatively, you can select all of the expired certificates by holding the "Ctrl" key and clicking each, then removing all at once
  5. Launch GOLD and ensure that encryption is working
If removing the expired certificates did not resolve the issue, follow these steps to reinstall the GoDaddy intermediate certificates to correct the error:
  1. Ensure you are logged into the workstation with administrative privileges
  2. Download the new GoDaddy certificates for import later (import is step #6)
    1. Navigate to https://certs.godaddy.com/anonymous/repository.pki in your browser
    2. Download the "Go Daddy Class 2 Certification Authority Root Certificate" to your workstation (remember which folder you place the file in)
      1. File name should be "gd-class2-root.crt"
    3. Download the "Go Daddy Class 2 Certification Authority Root Certificate - G2" to your workstation (remember which folder you place the file in)
      1. File name should be "gdroot-g2.crt"
  3. (Skip to step #5 if you still have "mmc" open from the previous steps)  Open the Microsoft Management Console
    1. Click on "Start"
    2. Click on "Run"
    3. Type in "mmc" (without quotes)
    4. Press "OK"
  4. Load the Certificates snap-in
    1. Click on "File"
    2. Select "Add/Remove Snap-in"
    3. Highlight "Certificates" on the left
    4. Click "Add >" in the middle
    5. In the new dialog box, select "Computer account"
    6. Click "Next"
    7. Click "Finish"
    8. Click "OK"
  5. Locate and remove the GoDaddy intermediate certificates from the Trusted Root Certification Authorities store
    1. Expand "Certificates (Local Computer)" on the left
    2. Expand "Trusted Root Certification Authorities"
    3. Click on "Certificates"
    4. In the list on the right, locate the "Go Daddy Class 2" certificates
    5. Remove them by right clicking on each and selecting "Delete"
    6. Click "Yes" on the confirmation
  6. Import the certificates you downloaded in step #2
    1. Right click on "Certificates" on the left (located immediately underneath "Trusted Root Certification Authorities")
    2. Select "All Tasks" then "Import"
    3. Click "Next"
    4. Click "Browse" and locate the "gd-class2-root.crt" file downloaded in step #2 and select it
    5. Click "Next"
    6. Ensure that "Place all certificates in the following store" is selected, and the store listed is "Trusted Root Certification Authorities"
    7. Click "Next"
    8. Click "Finish"
    9. Click "OK" on the confirmation prompt
    10. Repeat these steps for the "gdroot-g2.crt" file downloaded in step #2
    11. Launch GOLD and ensure that encryption is working
CU*Answers has encountered a rare few workstations that the steps above do not resolve the issue.  In this scenario, there may be some underlying issue with the workstation that is affecting the certificates from authenticating to the root certificate correctly.  As a workaround, follow these steps:
  1. Locate the "gd-class2-root.crt" file you downloaded above
  2. Copy this file into the C:\CUBASE\GOLD directory
  3. Open the C:\CUBASE\Seagull\jwalk.ini file in Notepad
  4. Add the following line to the very bottom of the file: SecureCertificateAuthorityFile=C:\CUBASE\GOLD\gd-class2-root.crt
  5. Save the file and exit Notepad
  6. Launch GOLD and ensure that encryption is working