Update: Microsoft patches Office 2003 lockout bug
It didn't extend digital certificates' expiration date; fix must be manually downloaded
Computerworld - Microsoft on Saturday fixed a bug that locked out Office 2003 users from accessing documents safeguarded with the company's rights management security technology.
Apparently, Microsoft forgot to extend the expiration date of the digital certificates used to control access to sensitive Office 2003 documents.
On Friday, Microsoft acknowledged the problem with Office 2003 and Rights Management Service (RMS) that had blocked users from opening or saving protected documents. By Saturday, the company had rushed a hotfix into place.
All Word, Excel, PowerPoint and Outlook documents from the Office 2003 suite that had been locked with RMS were unavailable as of Dec. 11, Microsoft said Friday night in a post to the Office Sustained Engineering blog.
Users saw the message, "Unexpected error occurred. Please try again later or contact your system administrator" when they tried to open or save RMS-protected documents.
The hotfix, which let users access the locked documents, must be downloaded manually, said Microsoft; the patch will not be pushed to users automatically via Windows Update.
According to Microsoft, the problem stemmed from the expiration of the digital certificates used to lock the RMS-protected documents. "Microsoft believed it was important to establish short-term expiration dates (in this case, seven years) for these certificates to allow us to re-evaluate and update IRM [Information Rights Management] capabilities based on new, more sophisticated encryption technology," a company spokeswoman said Monday.
But Microsoft neglected to update the certificates on schedule. "The original intent was to refresh and strengthen the certificate over time," the spokeswoman added. "We have not done a thorough post-mortem on this incident since we were very focused on fixing the problem. Looking ahead, we are exploring long-term solutions that will prevent something like this from happening again in the future," she said.
Documents created with Office 2007 or the public beta of Office 2010, then locked with RMS, were not affected by the gaffe, since their certificates are still valid.
The Technologizer site first reported the Office 2003 lock-out snafu on Friday afternoon.
Gregg Keizer covers Microsoft, security issues, Apple, Web browsers and general technology breaking news for Computerworld. Follow Gregg on Twitter
@gkeizer, send e-mail at gkeizer@ix.netcom.com or subscribe to Gregg's RSS feed
.
Read more about Desktop Apps in Computerworld's Desktop Apps Topic Center.



- Excel 2010 Cheat Sheet
- Register for this Computerworld Insider Cheat Sheet and gain access to hundreds of premium content articles, guides, product reviews and more.
- NetApp, VMware, Cisco, Wyse, Fujitsu 50,000 Seat VMware View deployment
- NetApp, VMware, Cisco, Fujitsu, and Wyse joined forces to create an architectural design for a 50,000-seat VMware View™ architecture built on VMware vSphere...
- Desktop Modernization eBook
- This eBook looks at the challenges involved in delivering and managing desktops, today and in the future. Its goal is to demonstrate how...
- 10 Reasons to Modernize the Desktop: CIO
- IT departments need a solution that meets the evolving needs of both the employees and IT- something not possible with a traditional PC...
- Overcome Top 7 Admin Challenges of Active Directory
- As Active Directory's role in the enterprise has drastically increased, so has the need to secure the data. Gain insight on creating repeatable,...
- Insiders Can Ruin Your Company. Take Action.
- Did you know that 80 percent of threats to an organization come from the inside? The threat from insiders is often overlooked in... All Desktop Apps White Papers
- Live Webcast
Banish Poor Application Performance: Eliminate Business Disruptions, Increase End User Productivity - End User Experience, 30-Min Webinar
Wed. Feb. 22nd ~ 11 AM ET
Are you ready to gain the proactive ability to rapidly respond... - Introduction to VMware View 5
- VMware View™ 5 simplifies IT management while increasing end user freedom by delivering desktop services from your cloud. Building upon VMware's leadership in...
- Banish Poor Application Performance: Eliminate Business Disruptions, Increase End User Productivity
- End User Experience, 30-Min Webinar
Wed. Feb. 22nd ~ 11 AM ET
Are you ready to gain the proactive ability to rapidly respond... - Optimizing Networks for the Cloud
- Join guest speaker, Rohit Mehra, IDC Director of Enterprise Communications Infrastructure, to explore current trends, discuss best practices for optimizing Data Center and...
- Apps QuickStart Series Part 2: Designing and Deploying SQL Server on VMware vSphere
- Download this webcast to learn about the design considerations for virtualizing SQL workloads, performance and scalability information and high-availability options, as well as...
- Apps QuickStart Series Part 1: Designing and Deploying Exchange 2010 on VMware vSphere
- Download this webcast to learn the virtual hardware design considerations for Exchange 2010, deployment using the building block approach, options for high-availability and... All Desktop Apps Webcasts