SSL Certs, SSL Certificate, SSL CertificatesSSL Certificates

Securing Your Online Business

Microsoft IIS 6.0 Support

Entrust L1A Chain Certificate and Entrust EV Root Installation Instructions

By installing the Entrust L1A Chain Certificate in your web server you create a chain of trust between end users and your Entrust EV SSL Certificate.

If your Entrust EV SSL Certificate request was successful, you received an email from Entrust Certificate Services that contains a link to your certificate(s) on the Entrust website. This page will contain at least three certificates: the Entrust L1A Chain Certificate, the Entrust EV Root Certificate, and your Entrust EV SSL Certificate. If you ordered more than one Entrust EV SSL Certificate, each certificate will be listed here. Please note that you must install both Entrust Chain Certificates.

These steps will show how to install the Entrust L1A Chain certificate and the Entrust EV Root Certificate. For more information on the Entrust Chain Certificates, please consult our FAQs.

! You install the chain certificate using the Certificate Manager Import wizard included in Service Pack 4 for Windows NT. Please ensure that you have installed Service Pack 4 or greater before you perform the steps below.

The Entrust L1A Chain Certificate can be found in the section named "Entrust Chain certificate" and is also included here: 

-----BEGIN CERTIFICATE-----
MIIFjjCCBHagAwIBAgIERWtQzTANBgkqhkiG9w0BAQUFADCBsDELMAkGA1UEBhMCVVMx
FjAUBgNVBAoTDUVudHJ1c3QsIEluYy4xOTA3BgNVBAsTMHd3dy5lbnRydXN0Lm5ldC9D
UFMgaXMgaW5jb3Jwb3JhdGVkIGJ5IHJlZmVyZW5jZTEfMB0GA1UECxMWKGMpIDIwMDYg
RW50cnVzdCwgSW5jLjEtMCsGA1UEAxMkRW50cnVzdCBSb290IENlcnRpZmljYXRpb24g
QXV0aG9yaXR5MB4XDTA3MDEwNTE4MjcxNFoXDTE3MDEwNTE4NTcxNFowggE0MQswCQYD
VQQGEwJVUzEWMBQGA1UEChMNRW50cnVzdCwgSW5jLjE4MDYGA1UECxMvQU5EIEFERElU
SU9OQUwgVEVSTVMgR09WRVJOSU5HIFVTRSBBTkQgUkVMSUFOQ0UxRzBFBgNVBAsTPkNQ
UyBDT05UQUlOUyBJTVBPUlRBTlQgTElNSVRBVElPTlMgT0YgV0FSUkFOVElFUyBBTkQg
TElBQklMSVRZMTkwNwYDVQQLEzB3d3cuZW50cnVzdC5uZXQvQ1BTIGlzIGluY29ycG9y
YXRlZCBieSByZWZlcmVuY2UxHzAdBgNVBAsTFihjKSAyMDA2IEVudHJ1c3QsIEluYy4x
LjAsBgNVBAMTJUVudHJ1c3QgQ2VydGlmaWNhdGlvbiBBdXRob3JpdHkgLSBMMUEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGRXpU6aql+KQv+Jo800ZMXsLRDTgT
/E3snIWwcSv6KD3Jqkto8Rd972Pyo6xcSP1Ln2MKPuLLmNFtEpcfzK0Njsl2wemfuxeE
bkfyy3N+sxUDQBOoC98WqkHIUNxN7CGTnL+QV8ZZ+XKPp7Qi81CbkvhbZ0vlosJ8EMzN
xdh73wOv3lJJ0LabQvMg3/ZgfSjB6uct6d5lj5id/NryvN8USarH0KI8UG1S7iVl7GgU
mAxhko7gN4Mf9yXVO7mWcX450/e8CET5D+d3jxipC1zrjLv25YnNicREoP1P/mlfGRMP
BD/3s2shdRMuVwOhBhstvMiXfuzOTNwXgFFIRo3lAgMBAAGjggEnMIIBIzAOBgNVHQ8B
Af8EBAMCAQYwDwYDVR0TAQH/BAUwAwEB/zAzBggrBgEFBQcBAQQnMCUwIwYIKwYBBQUH
MAGGF2h0dHA6Ly9vY3NwLmVudHJ1c3QubmV0MDMGA1UdHwQsMCowKKAmoCSGImh0dHA6
Ly9jcmwuZW50cnVzdC5uZXQvcm9vdGNhMS5jcmwwOwYDVR0gBDQwMjAwBgRVHSAAMCgw
JgYIKwYBBQUHAgEWGmh0dHA6Ly93d3cuZW50cnVzdC5uZXQvQ1BTMB0GA1UdDgQWBBR+
t/xMJuawevtU4jxFc8ZDkF4oBDAfBgNVHSMEGDAWgBRokORnpKZTgMeGZqTx90tD+4S9
bTAZBgkqhkiG9n0HQQAEDDAKGwRWNy4xAwIAgTANBgkqhkiG9w0BAQUFAAOCAQEALgFi
TnpwN6I8YX/wQeMDrmbruMoITR8C9y3smSbnm6df3SPGSuP6wfhp7azE7NtWuGv6hpmJ
CxmhWFPbWkNy64OdeLad23+8SVy4SW/DW3PJsw8p/vadXxV50dAMHPrlNPq3lxJDombV
+VczeJ61AG3W10SRiuavga31BtaBJbNioHorzffkKijAZN439AvxJNeoZj1UQ6cb1bjA
J/x5RcTWvk7aPVW9RamtTAZ1kL4YHOzlaxlOjk4v4HlxQyv3NLEO3+u8qS4ehcQr3Oke
4/icg3UsYptLwvCARpdpVunwO1f+RgS+KY9/d11Po2WUcAYLOfC2/oadzFrgEAFNNA==
-----END CERTIFICATE-----

The Entrust EV Root Certificate can be found in the section named "Entrust Root certificate" and is also included here:

-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----

Entrust L1A Chain Certificate Installation:

  1. Copy the entire certificate to your clipboard. The certificate begins with the line "----BEGIN CERTIFICATE-----" and ends with "-----END CERTIFICATE-----". You must include both these lines.



  2. Paste the certificate into a text editor such as Notepad, and ensure that the entire text is flushed to the left with no leading or trailing white space.



    ! If there are any extra spaces the server will not recognize the format of the file and you will not be able to install the certificate.

  3. Save the file as a .crt file (for example: L1Achaincert.crt or EVRoot.crt).
  4. Double-click on the newly saved Entrust L1A Chain Certificate file. The Certificate dialog box appears.



  5. In the General tab Click Install Certificate.

    The Certificate Manager Import Wizard appears.

  6. Select Next



  7. Select Automatically select the certificate store based on the type of certificate.
  8. Select Finish. A confirmation dialog appears.



  9. Select OK. You will receive a confirmation box indicating your Entrust L1A Chain Certificate installation was successful.



Entrust EV Root Installation:

! You must now install the Entrust EV Root Certificate which is the second certificate listed above.

Note: The installation instructions are the same for the Entrust L1A Chain Certificate and the Entrust EV Root Certificate.

Entrust EV SSL Certificate Installation:

Once you have installed both the Entrust L1A Chain Certificate and the Entrust EV Root Certificate, you may install your Entrust EV SSL Certificate. For instruction on how to install your Entrust EV SSL Certificate to your web server, please consult the general SSL instructions posted at http://www.entrust.net/ssl-technical/webserver.cfm for your server.