Entrust Certificate Services Support Knowledge Base

Audience: General
Last Modified: 2009-05-19 13:03:10.0

TN 7566 - Installation of Chain Certificate into Microsoft IIS5 and IIS6

Question:

How do I install a chain certificate in Microsoft IIS5 or 6?

Answer:

To install the Entrust L1B Chain Certificate in your web server you should;

1. Open a web browser and go to the URL that appears in the confirmation email you received from Entrust. Your certificates are displayed.
2. The Entrust SSL Certificate is in the section named "Entrust SSL Certificate" and the Entrust L1B Chain Certificate is in the section named "Entrust l1B Chain Certificate". The certificates look something like this:

3. Copy the Entrust Chain Certificate to your clipboard. You must include the "----BEGIN CERTIFICATE-----" and "-----END CERTIFICATE-----" lines:
4. Paste the certificate into a text editor such as Notepad, and ensure that the entire text is flushed to the left with no leading or trailing white space.

   If there are any extra spaces the server will not recognize the format of the file and you will not be able to install the certificate.

5. Save the file.
6. Rename the text file. Because you are installing the certificate in a Microsoft Windows-based web server the filename should have the extension .crt (for example, "entrustchaincert.crt").
7. Open the file that contains the chain certificate in Windows Explorer (for example, double-click the file). The Certificate dialog box appears.
8. In the General tab Click Install Certificate. The Certificate Manager Import Wizard appears.
9. Select Next
10. Select Place all certificates into the following store.
11. Select Browse... The Select Certificate Store dialog box appears.
12. Select Show Physical Stores.
13. Expand Intermediate Certification Authority by clicking the "+" sign beside the item in the dialog box
14. Select Local Computer and click the OK button.
15. Select Next
16. Select Finish. A confirmation dialog appears.
17. Select OK

You must restart the computer to ensure that the registry settings take effect.

You have just installed the Entrust Chain Certificate in the correct location in your registry.

Affected Products:

• Entrust Certificate Services Enhanced Service Account Version Not Applicable Language Not Applicable Platform Not Applicable