Entrust Certificate Services Support Knowledge Base

Audience: General
Last Modified: 2009-11-03 15:42:52.0

TN 7915 - How do I create a PKCS#7 (.p7b) file with the full certificate chain?

Question

How do I create a PKCS#7 (.p7b) file with the full certificate chain?

Answer

In order to create your PKCS#7 file, you must have the original certificate or .cer file.

Follow these steps:

1 - Double click on the certificate .cer file to open it.

2 - Click the Certification Path tab. Make sure the full chain of the certificate is showing. There should be 3 or full levels depending on the type of certificate you have. If you are missing one of the intermediate or root certificates, you can download them from our root pickup page http://www.entrust.net/developer/index.cfm. You must add the missing certificates to your Windows certificate store, under either the Intermediate or Trusted Root Certification Authority Folder depending on the certificate.

3 - Once you have verified that the certificate contains the full chain, click the Details tab and click Copy to File.

4 - Complete the wizard. Make sure you select the option to "Include all certificates in path if possible" to include and the intermediate/root certificates.

5 - Open the .p7b file that is created to verify that all of the correct certificates were included.

Affected Products:

• Entrust Certificate Services Standard Certificate - 1 Year Version Not Applicable Language Not Applicable Platform Not Applicable