Entrust Certificate Services Support Knowledge Base

Audience: General
Last Modified: 2009-12-15 13:34:30.0

TN 7565 - How do I install a chain certificate into Microsoft IIS 4?

Question:

How do I install a chain certificate in Microsoft IIS4?

Answer:

To install the Entrust chain certificate, you require the Certificate Manager Import wizard included in Service Pack 4 for Windows NT. Ensure you have installed Service Pack 4 or greater before you perform the steps below.

To install the Entrust L1C Chain Certificate in your Web server, complete the following:

1. Open a Web browser and go to the URL that appears in the confirmation email you received from Entrust. Your certificates appear.
2. The Entrust SSL Certificate is in the section named Entrust SSL Certificate and the Entrust L1C Chain Certificate is in the section named Entrust L1C Chain Certificate. The certificates look something like this:

   -----BEGIN CERTIFICATE-----
   MIIE8jCCA9qgAwIBAgIEOGPp/DANBgkqhkiG9w0BAQUFADCBtDEUMBIGA1UEChML
   RW50cnVzdC5uZXQxQDA+BgNVBAsUN3d3dy5lbnRydXN0Lm5ldC9DUFNfMjA0OCBp
   bmNvcnAuIGJ5IHJlZi4gKGxpbWl0cyBsaWFiLikxJTAjBgNVBAsTHChjKSAxOTk5
   IEVudHJ1c3QubmV0IExpbWl0ZWQxMzAxBgNVBAMTKkVudHJ1c3QubmV0IENlcnRp
   ZmljYXRpb24gQXV0aG9yaXR5ICgyMDQ4KTAeFw0wOTEyMTAyMDQzNTRaFw0xOTEy
   MTAyMTEzNTRaMIGxMQswCQYDVQQGEwJVUzEWMBQGA1UEChMNRW50cnVzdCwgSW5j
   LjE5MDcGA1UECxMwd3d3LmVudHJ1c3QubmV0L3JwYSBpcyBpbmNvcnBvcmF0ZWQg
   YnkgcmVmZXJlbmNlMR8wHQYDVQQLExYoYykgMjAwOSBFbnRydXN0LCBJbmMuMS4w
   LAYDVQQDEyVFbnRydXN0IENlcnRpZmljYXRpb24gQXV0aG9yaXR5IC0gTDFDMIIB
   IjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl6MtPJ7eBdoTwhGNnY7jf8dL
   flqfs/9iq3PIKGu6EGSChxPNVxj/KM7A5g4GkVApg9Hywyrb2NtOBMwA64u2lty8
   qvpSdwTB2xnkrpz9PIsD7028GgNl+cGxP3KG8jiqGa4QiHgo2nXDPQKCApy5wWV3
   diRMmPdtMTj72/7bNwJ2oRiXpszeIAlJNiRpQvbkN2LxWW2pPO00nKOO29w61/cK
   b+8u2NWTWnrtCElo4kHjWpDBhlX8UUOd4LLEZ7TLMjEl8FSfS9Fv29Td/K9ebHiQ
   ld7KOki5eTybGdZ1BaD5iNfB6KUJ5BoV3IcjqrJ1jGMlh9j4PabCzGb/pWZoVQID
   AQABo4IBCzCCAQcwDgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wMwYI
   KwYBBQUHAQEEJzAlMCMGCCsGAQUFBzABhhdodHRwOi8vb2NzcC5lbnRydXN0Lm5l
   dDAyBgNVHR8EKzApMCegJaAjhiFodHRwOi8vY3JsLmVudHJ1c3QubmV0LzIwNDhj
   YS5jcmwwOwYDVR0gBDQwMjAwBgRVHSAAMCgwJgYIKwYBBQUHAgEWGmh0dHA6Ly93
   d3cuZW50cnVzdC5uZXQvcnBhMB0GA1UdDgQWBBQe8auJBvhJDwEzd+4Ueu4ZfJMo
   TTAfBgNVHSMEGDAWgBRV5IHREYC+2Im5CKMx+aEkCRa5cDANBgkqhkiG9w0BAQUF
   AAOCAQEAB/ZfgoR/gEDHkDRGQiQDzi+ruoOeJXMN7awFacaH7aNc8lfBsUl2mk3y
   P93kDv4LPrmY2TKVHTL0Ae6cyMjlP+BTdmL83attPZSQ8sCzPJgnNl4olyL8G0DT
   Kw2ttVdt3w/jS+9zAhBl+hvQrDHV4w/oujIwg+5K0L/fIpB6vuw6G8RJBB3xroB3
   PEII26c7KKaAAQPmOaPr34BZG/MsvtxyRHmgbAelbU1EjkJoypR8Lja6hZ7NqsRe
   PFS+/i/qaZ0cHimbltjI/lGQ8SSmkAaz8Cmi/3gud1xFIdlEADHzvjJP9QoyDfz8
   uhZ2VrLWSJLyi6Y+t6xcaeoLP2ZFuQ==
   -----END CERTIFICATE-----
   

3. Copy the Entrust Chain Certificate to your clipboard. You must include the ----BEGIN CERTIFICATE----- and -----END CERTIFICATE----- lines.
4. Paste the certificate into a text editor such as Notepad, and ensure the entire text is flushed to the left with no leading or trailing white space.

   If there are any extra spaces the server will not recognize the format of the file and you will not be able to install the certificate.

5. Save the file.
6. Rename the text file. Because you are installing the certificate in a Microsoft Windows-based Web server, the filename should have the extension .crt (for example, entrustchaincert.crt).
7. Open the file that contains the chain certificate in Windows Explorer. The Certificate dialog box appears.
8. In the General tab, click Install Certificate. The Certificate Manager Import Wizard appears.
9. Select Next.
10. Select Place all certificates into the following store.
11. Select Browse. The Select Certificate Store dialog box appears.
12. Select Show Physical Stores.
13. Expand Intermediate Certification Authority by clicking the "+" sign beside the item in the dialog box
14. Select Local Computer and click OK.
15. Select Next.
16. Select Finish. A confirmation dialog appears.
17. Select OK.

   18.   Restart the computer to ensure that the registry settings take effect.

You have just installed the Entrust Chain Certificate in the correct location in your registry.

You may now install your Entrust SSL Certificate.

Affected Products:

• Entrust Certificate Services Enhanced Service Account Version Not Applicable Language Not Applicable Platform Not Applicable