If you experience this issue, install
Entrust Entelligence Security Provider for Windows 9.2 Patch 173332 or
Patch 173335. Contract Entrust support for details about how to obtain patch at
https://www.entrust.net/customer_support/contact.cfm.
NOTE: Refer to Entrust Internal tech note
TN8782 for details. Customers must have a support account with Entrust to view TN8782.
If you experience this issue on other versions of Entrust, contract Entrust support for recommended resolutions for that product version.
The following is a summary from the Release Notes for Entrust Entelligence Security Provider for Windows 9.2 Patch 173332, containing complete details regarding this issue.
Summary
Unwanted delays can occur when Security Provider looks for certain Certification Authority (CA) certificates during certificate path discovery. To resolve this issue, this patch introduces a new configuration setting, IgnoreDNsForCASearch, that you can add to the Windows registry. The IgnoreDNsForCASearch setting specifies a semicolon (;) separated list of CA distinguished names (DN) that Security Provider will ignore when searching for certificates during certificate path discovery. Security Provider will skip searching all CA certificates that correspond to a CA DN in the list.
