Contacts

SSL connection error, what should I do? Checking secure connections in mozilla firefox – Operating instructions KASPERSKY LAB KAV2011- Kaspersky antivirus How to disable ssl scanning in Kaspersky

Kaspersky PURE 3.0 checks data transmitted via SSL protocol.
To authenticate web servers and secure the SSL communication channel between the web server and the user's computer Kaspersky PURE 3.0 uses self-signed electronic certificate. If, when visiting a possibly infected web resource, its certificate is identified by the program as untrusted, then Kaspersky PURE 3.0 will either close the connection or offer to accept/reject the certificate.
Certificate Kaspersky PURE 3.0 automatically installed in browsers Internet Explorer , Mozilla Firefox And Google Chrome . For browser Opera The certificate must be installed manually.

1. How to enable/disable scanning of secure connections

By default, secure connections are checked in Kaspersky PURE 3.0 included. You can enable/disable scanning by following these steps:

  1. Settings.
  1. In the upper right part of the window Settings go to the tab Additionally.
  2. On the left side of the window Settings select item Net.
  3. On the right side of the window Settings in the block do the following:
    • To enable scanning of secure connections, select the checkbox.
    • To disable scanning of secure connections, clear the checkbox Check secure connections.
  4. In the window Settings click on the button OK.

2. How to configure settings for checking secure connections

To configure settings for checking secure connections, follow these steps:

  1. In the upper right part of the main window, click on the link Settings.

  1. In the upper right part of the window Settings go to the tab Additionally.
  2. On the left side of the window Settings select item Net.
  3. On the right side of the window Settings in the block Checking secure connections select the action that will be performed when checking a secure connection:
    • Always check secure connections– when connecting your computer to the web server, the program, depending on established mode protection will do the following:
      • When working in interactive mode, protection will notify you that an untrusted certificate has been detected and will offer to accept/reject the certificate.
      • When working in automatic mode the connection will be terminated without notice.
    • Check secure connections if enabled Parental control – when connecting your computer to a web server, the program will check for secure connections if Parental Control is enabled.

  1. To quickly load web pages and transfer data over a secure connection, some web servers (for example, Google) use the SPDY protocol instead of the HTTP protocol. If a secure connection is established using the SPDY protocol, then the data transmitted from the web server is not checked using heuristic analysis. In this case, it is likely that possibly infected programs will be downloaded.
    To have the program check the data transmitted from the web server using heuristic analysis and control it, select the checkbox Use HTTP protocol instead of SPDY protocol.
  2. In the window Settings click on the button OK.

  1. Close the main program window.

3. How to install a certificate to verify secure connections in the Opera browser

To install a certificate Kaspersky Lab in the browser Opera, follow these steps:

Step 1. Save the certificate on your computer

  1. Close all browser windows.
  2. In the upper right part of the main window, click on the link Settings.

  1. In the upper right part of the window Settings go to the tab Additionally.
  2. On the left side of the window Settings select item Net.
  3. On the right side of the window Settings in the block Checking secure connections click on the button Install certificate.

  1. In the window Installing a certificate click on the button Further.

  1. In the window Installing a certificate select item Install certificate manually, following the instructions.
  2. Click on the button Further.

  1. In the window Installing a certificate click on the button Save certificate.

  1. In the window Save certificate save the certificate to Desktop.

  1. In the window Installing a certificate click on the button Cancel.

  1. In the window Settings click on the button OK.
  2. Close the main program window.

Step 2. Install the certificate in the browser Opera

  1. Open your browser Opera.
  2. In the upper left corner of the browser window, click the button Opera and select from the drop-down menu Settings –> General Settings.

  1. In the window Settings go to the tab Advanced.
  2. On the left side of the window, select Safety.
  3. Certificate management.

  1. In the window Certificate management go to the tab Publishers.
  2. On the right side of the window Certificate management click on the button Import.

  1. In the window Importing a certificate Locate the previously saved certificate.
  2. Click on the button Open.

  1. In the window Installing a certificate click on the button Install.

  1. In the window Installing a certificate click on the button OK.

  1. If you don't want the program to notify you when you use a certificate when you visit a website Kaspersky Lab, then do the following:
    • In the window Certificate management go to the tab Publishers.
    • On the left side of the window, select Kaspersky Anti-Virus Personal Root Certificate.
    • On the right side of the window, click the button View.

  • In the window Certificate uncheck the box Warn before using this certificate.
  • In the window Certificate click on the button OK.

  1. In the window Certificate management click on the button OK.
  2. In the window Settings click on the button OK.

If, when you try to establish a secure connection with any site using the https:// protocol (for example, https://security.webmoney.ru) in the window Google browser Chrome you see the following picture, then you need to install root certificate Kaspersky Anti-Virus Personal Root Certificate.

To do this, find the certificate on your computer along the path * r, and then in the menu Settings -> Additional settings , In chapter HTTPS/SSL click on the button "Configure certificates" .
If you don’t see such a folder, turn it on following instructions.
* Note! The path may differ depending on the version of Kaspersky Lab antivirus installed on you.
If the path is different, it is better to install the latest version of the antivirus. There is a high probability that after this the problem will disappear on its own, and all subsequent actions will not need to be performed.
Download links latest versions Kaspersky Lab products:

** If you can’t get to the certificate through Explorer, turn on the display of hidden files and folders according to the instructions from articles.

To install the certificate, go to the tab and press the button "Import…",


To select a certificate file, click the button "Review..".

Locate the certificate file on your hard drive along the path c:\ProgramData\Kaspersky Lab\AVP17.0.0\Data\Cert\(fake)Kaspersky Anti-Virus Personal Root Certificate.ce r and press the button "Open" and then the button "Next >".

Please note that the default certificate store suggested must be the same as where the root certificate should be placed. If the import was initiated from another section of the certificate store, then you need to select the store using the “Browse…” button "Trusted Root Certification Authorities" and press the button "Next >".

Then you should confirm the completion of the wizard by clicking the button "Ready",

next button "Yes", and finally the button "OK".


To control the correctness of the operations performed in the window Certificates open the tab Trusted Root Certification Authorities and at the end of the list, find the root certificate you installed and open the certificate information window by clicking the button "View". Make sure the certificate is valid.

Close all windows, restart your browser and check the validity of the certificate by establishing a secure connection.

When I installed on a newly purchased laptop with operating Windows system 8.1 x64 Kaspersky antivirus, or rather Kaspersky Internet Security for all devices (Version 2016 (16.0.0.614)), then the first time I tried to access the Yandex website (this is also true for Google), I received the following warning in the FireFox x64 v43.0.0 browser window:

At the same time, most other sites operating using the HTTPS protocol, including my blog, opened quite normally. That is, there were no crashes in the browser.

How Kaspersky checks SSL-protected connections

Kaspersky Anti-Virus scans protected SSL connections by installing a Kaspersky Lab certificate (self-signed certificate). And the absence of such a certificate in the browser storage leads to the described error. Automatic installation certificate works for the Internet Explorer browser. And for Mozilla Firefox, in order to fix the error described above, you need to manually register the certificate in the browser settings.

How to add Kaspersky certificate to FireFox

To add a certificate from Kaspersky, follow these steps:
Go to your browser settings

In the "Advanced" section of the "Certificates" menu, click the [View Certificates] button

In the “Certification Authorities” tab, click the [Import...] button

Select a certificate (fake)Kaspersky Anti-Virus personal root certificate.cer. Which for Kaspersky 16.0.0.614 in Windows 8.1 is located at C:\ProgramData\Kaspersky Lab\AVP16.0.0\DataCert and click the [Open] button
If you don't see the folder in the browser ProgramData, then read how to fix it.

In the window that appears, select the required options (I selected all). And click [OK]

Now in the list of FireFox certificate stores you should see a Kaspersky Lab certificate, which the browser will consider trusted.

After carrying out all the above steps, Yandex and Google sites began to open normally.

How to allow viewing of hidden folders in Windows Explorer

Go to the control panel and select "Folder Options"

In the “View” tab, check the box at the very bottom “Show hidden files, folders and drives”

An alternative solution for unblocking the HTTPS protocol in Kaspersky

This option consists of disabling Kaspersky scanning of secure connections. To do this, go to your antivirus settings.

Checking secure connections in Mozilla Firefox

Mozilla Firefox browser does not use certificate store Microsoft Windows. To check SSL connections when using Firefox, you must install the Kaspersky Lab certificate manually.

To install a Kaspersky Lab certificate, follow these steps:

  1. In the Certificates block, select the Security tab and click the button View certificates.
  2. Certification Authorities and click on the Restore button.
  3. .

To install a Kaspersky Lab certificate for Mozilla Firefox version 3.x, follow these steps:

  1. In the browser menu, select Tools ® Settings.
  2. In the window that opens, select the Advanced section.
  3. On the Encryption tab, click the button View certificates.
  4. In the window that opens, select a bookmark Certification Authorities and click on the Import button.
  5. In the window that opens, select the Kaspersky Lab certificate file. Path to the Kaspersky Lab certificate file: %AllUsersProfile%\Application Data\Kaspersky Lab\AVP60MP4\Data\Cert\(fake)Kaspersky Anti-Virus personal root certificate.cer.
  6. In the window that opens, check the boxes to select actions for which the installed certificate will be used for verification. To view information about the certificate, use the View button.

If your computer is running an operating system Microsoft systems Windows Vista, then the path to the Kaspersky Lab certificate file will be like this: %AllUsersProfile%\Kaspersky Lab\AVP60MP4\Data\Cert\(fake)Kaspersky Anti-Virus personal root certificate.cer.

Did you like the article? Share it