Entrust Datacard

Entrust Certificate Services Support Knowledge Base

Audience: General
Last Modified: 2014-11-13 16:41:25.0

TN 8166 - How is the Chain Certificate installed on Microsoft Windows Server 2008 ?


How is the Chain Certificate installed on Microsoft Windows Server 2008 ?

NOTE: These instructions apply to the following server types:

Microsoft IIS 7
Microsoft Exchange 2007 (Windows Server 2008)
Microsoft Exchange 2010
Microsoft Office Communications Server 2010
Microsoft Lync 2010
Microsoft Forefront TMG



To install the chain certificate using MMC


  1. Copy the Entrust chain certificate from the Chain Certificate tab of the certificate pickup page to a text file and save it as a .cer file on your web server.
    The chain certificate can also be downloaded from: http://www.entrust.net/developer/index.cfm.

  1. Click Start > Run.

  1. Enter MMC and click OK.
  2. Go to File > Add/Remove Snap-in.

  3. Click Certificates, and select Add.

  4. Select Computer Account, and click Next.

  5. Select Local Computer and click Finish.

  6. Click OK to close the Snap-ins window.

  7. Double-click Certificates (local computer) to expand its view.
  8. Right-click Intermediate Certification Authorities and select All Tasks àImport.

  9. Complete the wizard to import the chain certificate. Browse to locate the chain certificate to be imported (*.cer).
  10. Select Place all certificates in the following store and select the Intermediate Certificate Authorities store.

  11. Click Next; then click Finish to complete the wizard.

Right-click Intermediate Certification Authorities and select Refresh. Expand the view for Intermediate Certification Authorities and look in the certificates directory to verify that the certificate is installed correctly.

14. Important Step: If the certificate pickup wizard includes a box for Chain Root Certificate File, it is critical that this certificate be included in the Intermediate Certification Authority store to complete the certificate chain. If the Chain Root Certificate is presented during the certificate pickup process, repeat steps 10-13 to import the certificate.  Once the Chain Root Certificate has been imported, this should be the resulting view in the Intermediate Certification Authority store:

Please Note: If the Chains are being imported after the server certificate has been assigned, it may require that you restart services or even re-assign the certificate for these changes to take effect. In the cases of Microsoft TMG servers, it may require a full reboot for the new certificate chain to take effect if the chains were installed after the server certificate was installed and assigned.


Affected Products:

  • Entrust Certificate Services 1 Year Advantage SSL Certificate Version Not Applicable Language Not Applicable Platform Not Applicable