Error: The management console is unavailable because a root certificate is missing. Go to Verisign and download the certificate “VerSign Class 3 Primary CA – G5”

• Disable the checks for server certification revocation on IE through a PowerShell script.
  • In IE, navigated to Internet Options > Advanced >  Security and unchecked Check for Publisher’s  certificate revocation
  • PowerShell script:

    • #the following statement goes on one line
      set-ItemProperty -path "HKCU:\Software\Microsoft\Windows\CurrentVersion\WinTrust\Trust Providers\Software Publishing" -name State -value 146944
       
      #the following statement goes on one line also
      set-ItemProperty -path "REGISTRY::\HKEY_USERS\.Default\Software\Microsoft\Windows\CurrentVersion\WinTrust\Trust Providers\Software Publishing" -name State -value 146944
       
      get-ChildItem REGISTRY::HKEY_USERS | foreach-object {set-ItemProperty -ErrorAction silentlycontinue -path ($_.Name + "\Software\Microsoft\Windows\CurrentVersion\WinTrust\Trust Providers\Software Publishing")  -name State -value 146944}
       
      Write-Host -ForegroundColor White " - Disabling Certificate Revocation List (CRL) check..."
      ForEach($bitsize in ("","64")) 
      {			
        $xml = [xml](Get-Content $env:windir\Microsoft.NET\Framework$bitsize\v2.0.50727\CONFIG\Machine.config)
        If (!$xml.DocumentElement.SelectSingleNode("runtime")) { 
          $runtime = $xml.CreateElement("runtime")
          $xml.DocumentElement.AppendChild($runtime) | Out-Null
        }
        If (!$xml.DocumentElement.SelectSingleNode("runtime/generatePublisherEvidence")) {
          $gpe = $xml.CreateElement("generatePublisherEvidence")
          $xml.DocumentElement.SelectSingleNode("runtime").AppendChild($gpe)  | Out-Null
        }
        $xml.DocumentElement.SelectSingleNode("runtime/generatePublisherEvidence").SetAttribute("enabled","false")  | Out-Null
        $xml.Save("$env:windir\Microsoft.NET\Framework$bitsize\v2.0.50727\CONFIG\Machine.config")
      }

Problem Cause

• StoreFront was unable to verify the certificate since the server did not have internet access.