Entrust Certificate Services Support Knowledge Base

Audience: General
Last Modified: 2009-12-14 13:25:52.0

TN 7930 - How do I install my Extended Validation Certificate on Novel Netware 6.0 device?

Question:

How do I install my Extended Validation Certificate on Novel Netware 6.0?

Answer:

 

The Novell Certificate Server requires the entire certificate chain (Server Certificate, Intermediate Trusted Root, and Trusted Root Certificate) in order to import certificates issued by an external CA. This is done by using Internet Explorer to create a PKCS #7 envelope. Only when this envelope has been created can the entire certificate chain be imported into the Novell Certificate Server.

 

To install all of the certificates in the certificate chain in one single file, you will have to create a .p7b file on a Windows machine. Before you can create this file, you need to make sure the required chain and root files are installed on the machine.

To install the chain and root files

 

1. Click Start > Run.
2. Type MMC and hit Enter.

3. Click FileAdd/Remove Snap-in.

4. Click Add.

5. In the Add Standalone Snap-in dialog, select Certificates and click Add.

   The wizard appears.
6. Select Computer account and click Next.

7. Select Local Computer and click Finish.

8. Click Close.

9. Click OK.

10. Expand Certificates on the left hand side of the console window.

11. Locate the Intermediate Certification Authority folder.

12. Right click on the sub-folder Certificate and select Import under All Tasks.

13.Import the L1E Chain and the EV Chain root one at a time. These are available on your certificate pickup pages or at http://www.entrust.net/developer/index.cfm

14. Restart your IIS Services.

 

Once you have setup the EV chain certificate, you can create your .p7b file.

 

Save your Web server certificate on the same computer as a .cer file.

 

When you open the file and click the Certification Path tab, you should see a certificate with 4 levels.

 

 

 

To create the .p7b file

 

1. Click on the Details tab and click Copy to file.

2. Complete the wizard. Make sure you select the option to Include all certificates in path if possible to include and the intermediate/root certificates.

3. Open up the resulting .p7b file to verify that all the certificates appear

 

To import your PKCS #7 envelope into Novell

  1. In Console One, locate the KMO (Key Material) used to create your CSR (certificate signing request).
  2. Right click the KMO and select Properties.
  3. Click the Certificates tab.
  4. Click the Import button.
    The Import Server Certificates window appears.
  5. Check the box for No Trusted Root Certificate available.
  6. Click Next.
  7. Click Read from file button.
  8. Locate the PKCS #7 envelope you exported in the above steps.
    Note: To locate the file with the .p7b extension, specify the .p7b file type in the Files of type drop-down list.
  9. Once you have located your .p7b file, click Open.
  10. Click Finish.
    You have completed importing your PKCS #7 envelope into Novell Netware.