Let me remind you that you do everything at your own risk.

Because everything is at my own risk I will not be changing any settings and because of this I am still unable to access Gerasim website so unfortunately I will not be able to contribute to project until I am able to access http://gerasim.boinc.ru/

Let me remind you that you do everything at your own risk.

Because everything is at my own risk I will not be changing any settings and because of this I am still unable to access Gerasim website so unfortunately I will not be able to contribute to project until I am able to access http://gerasim.boinc.ru/

No problem.

I'd also like to point out that your server (based on IIS 10) is currently also returning an error:

403 - Forbidden: Access is denied.
You do not have permission to view this directory or page using the credentials that you supplied.

There are at least two possible causes for this:
1. Fingerprint SHA256: c0c2be76f244b8cc67e6cea2ba240452b75e8d4094942c7f5821420155964bb6
Valid until: Thu, 23 Oct 2025 09:12:17 UTC EXPIRED

2. The current domain name has been changed and does not match the name in the certificate.

Your site opens without using SSL.
https://www.spcs.co.nz/ (203.86.194.105)

I hope this helps you or the specialist who helps you resolve these simple issues.

I did further investigation.
If you try to access "gerasim.boinc.ru" for the first time (so use a private window) in the URL it does the certificate prompt. If you cancel instead of selecting a certificate then the website loads fine. Thereafter it always works.

The cross-device certificate is irrelevant since its asking the user to fallback on choosing a cert. The question is why is the prompt happening in the first place?

Here is a video: https://www.dropbox.com/scl/fi/9xeat5awpgemhhwb6dhh3/gerasim-2.mp4?rlkey=4hastrxoul2au54rlfw255j3d&st=d3bu88gm&dl=0

I was able to replicate this on a few windows computers. Whatever self-signed certs are listed in the prompt seem to be irrelevant. It should not be launching this prompt at all.

I did further investigation.
If you try to access "gerasim.boinc.ru" for the first time (so use a private window) in the URL it does the certificate prompt. If you cancel instead of selecting a certificate then the website loads fine. Thereafter it always works.

That's right. That's exactly how it is.

The cross-device certificate is irrelevant since its asking the user to fallback on choosing a cert. The question is why is the prompt happening in the first place?

This question should be asked to the guys from MS, not me.

I showed how to solve this problem in the first part of the post:
https://numberfields.asu.edu/NumberFields/forum_thread.php?id=667&postid=4211
Notice the line:

If the certificate is causing login prompt issues, it is recommended to check if it's being incorrectly used by VPN software rather than Windows, as noted in this Microsoft Q&A post

How to solve this problem?

It is written in the same post, but I will repeat it again:
Press Win + R, type mmc, and press Enter.
Go to File > Add/Remove Snap-in.

Select Certificates > Add > Computer account > Local Computer > Finish.
Navigate to Personal > Certificates.

Select "757dc811-7215-44c9-9856-1101aa2c803c"
(CN = Microsoft Your Phone)

And delete it.
Confirm it.

Restart your browser and check that Gerasim's website has begun to open normally.

Here is a video: https://www.dropbox.com/scl/fi/9xeat5awpgemhhwb6dhh3/gerasim-2.mp4?rlkey=4hastrxoul2au54rlfw255j3d&st=d3bu88gm&dl=0

I watched the video. That's right. The phone certificate interferes.

I was able to replicate this on a few windows computers. Whatever self-signed certs are listed in the prompt seem to be irrelevant. It should not be launching this prompt at all.

Test these recommendations on one of these computers and report the result here.

I am aware about my website & how to access it. I do not see how this has any relevance with the Boinc project in question. Thank you for your concern though

I am aware about my website & how to access it. I do not see how this has any relevance with the Boinc project in question. Thank you for your concern though

Because its easier to blame you then admit the Gerasim site/project is still not up to proper working order.

I am aware about my website & how to access it. I do not see how this has any relevance with the Boinc project in question. Thank you for your concern though

Because its easier to blame you then admit the Gerasim site/project is still not up to proper working order.

No, that is not the case.
If you had taken the time to actually read any of the posts you would realise the issue is with Speedy51's system.

There may be all sorts of issues still remaining with the Gerasim project, but accessing it's web site isn't one of them.

---

Grant
Darwin NT, Australia.

I am aware about my website & how to access it. I do not see how this has any relevance with the Boinc project in question. Thank you for your concern though

Because its easier to blame you then admit the Gerasim site/project is still not up to proper working order.

No, that is not the case.
If you had taken the time to actually read any of the posts you would realise the issue is with Speedy51's system.

There may be all sorts of issues still remaining with the Gerasim project, but accessing it's web site isn't one of them.

I still have issues with those kinds of errors accessing the site, which is why I haven't started back running the project again because still believe there are issues going on. At least they say they are now doing backups so there is that.

I am aware about my website & how to access it. I do not see how this has any relevance with the Boinc project in question. Thank you for your concern though

Because its easier to blame you then admit the Gerasim site/project is still not up to proper working order.

No, that is not the case.
If you had taken the time to actually read any of the posts you would realise the issue is with Speedy51's system.

There may be all sorts of issues still remaining with the Gerasim project, but accessing it's web site isn't one of them.

Yes.
You're absolutely right.
In every sentence.

Thank you for your opinion.
An opinion from the other side of the project.
This is very important to us.

I think I've found a better method.
The last part of the instructions should be done like this:

Select "757dc811-7215-44c9-9856-1101aa2c803c"
(CN = Microsoft Your Phone)

And delete it.
Confirm it.

And just move (drag-and-drop) FROM "Personal > Certificate" TO "Intermediate Certification Centers > Certificate"

Restart your browser and check that Gerasim's website has begun to open normally.

It's funny, of course, that the problems caused by the guys from Redmond have to be discussed on the boinc forum.

Thank you for participating in our project!

I am aware about my website & how to access it. I do not see how this has any relevance with the Boinc project in question. Thank you for your concern though

Because its easier to blame you then admit the Gerasim site/project is still not up to proper working order.

I agree. Until I can access the website (without the user/Speedy51 having to make any changes) I will not participate in the project.

Привет, ребятки.
****
Я полагаю, что наш дорогой Demis слегка переусердствовал в системе безопасности.
Он почему-то думает, что участники распределённых вычислений только и мечтают
о том, как получить какой-нибудь сертификат и установить его на свой компьютер. :)
Убедить его в обратном - пока не получается..
****
На самом деле, участникам сертификаты не нужны, и знать о них незачем..
Главная страница проекта безусловно должна быть видна без каких-либо ограничений
и дополнительных действий участника.
****
Всем привет и хорошего настроения! :)
****
Hey, guys.
****
I think our dear Demis has gone a bit overboard with the security system.
For some reason, he thinks that distributed computing participants only dream
of getting some kind of certificate and installing it on their computer. :)
I haven't been able to convince him otherwise so far.
****
In fact, participants don't need certificates, and there's no need to know about them.
The project's main page should definitely be visible without any restrictions
or additional participant actions.
****
Hello everyone, and have a great time! :)

For some reason, he thinks that distributed computing participants only dream
of getting some kind of certificate and installing it on their computer.

You're wrong.
The certificate "Microsoft Your Phone" with a reduced security level is installed with a Microsoft update.
It's installed in the wrong location.
It needs to be deleted or moved to the correct location.
If you don't know this, contact Microsoft technical support. They'll explain everything to you.

Different Systems and OS's all trying to access Gerasim. I have multiple Windows systems using different browsers and on most of them I can't pull up the project Home Page.

That should be a real basic thing Web Access.
A 403 Forbidden Access error is fatal

Respectfully
Bill F

Different Systems and OS's all trying to access Gerasim. I have multiple Windows systems using different browsers and on most of them I can't pull up the project Home Page.

That should be a real basic thing Web Access.
A 403 Forbidden Access error is fatal

Respectfully
Bill F

Just read:
2023:
https://learn.microsoft.com/en-us/answers/questions/2400096/certificate-for-authentication-is-keeping-videos-f
2024:
https://learn.microsoft.com/en-us/answers/questions/3746319/how-to-fix-windows-authentication-certificate-erro
2025:
https://learn.microsoft.com/en-us/answers/questions/4718849/how-to-install-microsoft-your-phone-certificate-in