{"id":116,"date":"2009-12-09T09:55:40","date_gmt":"2009-12-09T09:55:40","guid":{"rendered":"http:\/\/test.bleuanus.nl\/index.php\/installing-intermediates-chain-certificates\/"},"modified":"2018-12-11T16:09:08","modified_gmt":"2018-12-11T15:09:08","slug":"installing-intermediates-chain-certificates","status":"publish","type":"post","link":"https:\/\/www.bleuanus.nl\/index.php\/2009\/12\/09\/installing-intermediates-chain-certificates\/","title":{"rendered":"Installing Intermediates (Chain) Certificates"},"content":{"rendered":"<p class=\"last-modified\">This post was most recently updated on December 11th, 2018<\/p><p><strong>Problem<\/p>\n<p><\/strong>How do I install the intermediate (chain) certificates on IIS 6?<\/p>\n<p><strong>Resolution<br \/><\/strong><br \/>This guide will show you how to install the Intermediate (or chaining) Certificates onto your server when using IIS 5 or IIS 6.\u00a0 In these instructions, you will use MMC (Microsoft Management Console) to install the certificates.<\/p>\n<ol>\n<li>Click on Start and then click on Run.\u00a0 In the Run field, type in MMC.<\/li>\n<li>In the new window, click File at the top menu.<\/li>\n<li>Select Add\/Remove Snap in from the drop down list.<\/li>\n<li>Click the Add&#8230; button.<\/li>\n<li>Select Certificates from the list.<\/li>\n<li>Select the option for Computer account.<\/li>\n<li>Leaving everthing as default, click on Finish on the file screen of the wizard.<\/li>\n<li>Close the Add Standalone Snap-in.<\/li>\n<li>Click OK on the Add\/Remove Snap-in window.<\/li>\n<li>In MMC, expand the tree in the left hand pane by clicking on the + sign.<\/li>\n<li>Double click and expand Intermediate Certification Authorities.<br \/>    You should see two options directly underneath Intermediate Certificates Authorities.<\/li>\n<li>Right click on Certificates and select All Tasks and then Import.<br \/>    You should see a wizard.<\/li>\n<li>Click Next.<\/li>\n<li>At the next screen, click browse and select the intermediate file that you would like to install.\u00a0 The file extension of this file should be either .crt or .cer.\u00a0 Once you are done, click Next.<\/li>\n<li>At the next screen, accept the default of Place all certificates in the following store and click Next.<\/li>\n<li>At the final screen, click on Finish.<\/li>\n<\/ol>\n<h2>Installing your ssl Certificate on a Microsoft IIS 5.x \/ 6.x<\/h2>\n<p>\u00a0<\/p>\n<h4>1. Save the certificate files from the email you received.<\/h4>\n<p>to your computer. You may use whatever filename and extension that you want so long as you remember what you used. It is suggested that you save the files with a .cer extension which will make importing the certificates into IIS easier.<\/p>\n<p>\u00a0<\/p>\n<h4>2. Installing the Root &#038; Intermediate Certificates:<\/h4>\n<p>You will have received 4 Certificates:<\/p>\n<ul>\n<li>(Root CA Certificate &#8211; UTN-USERFirst-Hardware.crt<\/li>\n<li>Intermediate CA Certificate &#8211; AddTrustUTNServerCA.crt<\/li>\n<li>Intermediate CA Certificate &#8211; PostiveSSLCA.crt<\/li>\n<li>Your SSL Server Certificate &#8211; yourdomain_com.crt<\/li>\n<\/ul>\n<p>Save these Certificates to the desktop of the webserver machine, then:<\/p>\n<ul>\n<li>Click the <strong>Start Button<\/strong> then select <strong>Run<\/strong> and type <em>mmc<\/em><\/li>\n<li>Click <strong>Console<\/strong> and select<strong> Add\/Remove Snap in<\/strong><\/li>\n<li>Select <strong>Add<\/strong>, select <strong>Certificates<\/strong> from the <strong>Add Standalone Snap-in<\/strong> box and click <strong>Add<\/strong><\/li>\n<li>Select <span style=\"font-weight: bold; color: red\">Computer Account<\/span> and <span style=\"font-weight: bold; color: red\">Local Computer<\/span> then click <strong>Finish<\/strong><\/li>\n<li>Close the <strong>Add Standalone Snap-in<\/strong> box, click OK in the Add\/Remove Snap in<\/li>\n<li>Return to the MMC<\/li>\n<\/ul>\n<div style=\"font-weight: bold; padding-bottom: 3px; padding-top: 3px\">Root Certificate:<\/div>\n<ul>\n<li>To install the <strong>UTN-USERfirst-Hardware<\/strong> Root Certificate:<\/li>\n<\/ul>\n<p class=\"center\"><img loading=\"lazy\" decoding=\"async\" height=\"379\" alt=\"IIS SSL server certificate - GTECyber TrustRoot\" width=\"481\" src=\"\/media\/images\/windows2003\/iis\/ssl-IISRootInstall2.gif\" \/><\/p>\n<ul>\n<li>Right click the <em>Trusted Root Certification Authorities<\/em>, select <strong>All Tasks<\/strong>, select <strong>Import<\/strong>.<\/li>\n<\/ul>\n<p class=\"center\"><img loading=\"lazy\" decoding=\"async\" height=\"386\" alt=\"IIS SSL server certificate -  certificate import wizard\" width=\"503\" src=\"\/media\/images\/windows2003\/iis\/ssl-IISRootImport3.gif\" \/><\/p>\n<ul>\n<li>Click <strong>Next<\/strong>.<\/li>\n<\/ul>\n<p class=\"center\"><img loading=\"lazy\" decoding=\"async\" height=\"386\" alt=\"IIS SSL server certificate - file for import\" width=\"503\" src=\"\/media\/images\/windows2003\/iis\/ssl-IISRootImport4.gif\" \/><\/p>\n<ul>\n<li>Locate the <strong>UTN-USERfirst-Hardware<\/strong> Certificate and click <strong>Next<\/strong>.<\/li>\n<li>When the wizard is completed, click <strong>Finish<\/strong>.<\/li>\n<\/ul>\n<div style=\"font-weight: bold; padding-bottom: 3px; padding-top: 3px\">Intermediate Certificates:<\/div>\n<ul><a name=\"inter\"><\/a>    <\/p>\n<li>To install the <strong>PostiveSSLCA certificate<\/strong> &#038; <strong>AddTrustUTNServerCA<\/strong> intermediate Certificates:<\/li>\n<\/ul>\n<p class=\"center\"><img loading=\"lazy\" decoding=\"async\" height=\"382\" alt=\"IIS SSL server certificate - console\" width=\"483\" border=\"0\" src=\"\/media\/images\/windows2003\/iis\/ssl-IISIntInstall1.gif\" \/><\/p>\n<ul>\n<li>Right click the <em>Intermediate Certification Authorities<\/em>, select <strong>All Tasks<\/strong>, select <strong>Import<\/strong>.<\/li>\n<li>Complete the import wizard again, but this time locating the <strong>PostiveSSLCA Certificate<\/strong> when prompted for the Certificate file.<\/li>\n<li>Repeat for the <strong>AddTrustUTNServerCA<\/strong> intermediate certificate<\/li>\n<\/ul>\n<div style=\"font-weight: bold; padding-bottom: 3px; color: red; padding-top: 3px\">Check your progress:<\/div>\n<ul>\n<li>Ensure that the <strong>UTN-USERfirst-Hardware<\/strong> certificate appears under <strong>Trusted Root Certification Authorities<\/strong><\/li>\n<li>Ensure that the <strong>PostiveSSLCA<\/strong> &#038; <strong>AddTrustUTNServerCA<\/strong> appears under <strong>Intermediate Certification Authorities<\/strong><\/li>\n<\/ul>\n<h2>Installing your IIS SSL Certificate:<\/h2>\n<ul>\n<li>Select <strong>Administrative Tools<\/strong><\/li>\n<li>Start <strong>Internet Services Manager<\/strong><\/li>\n<\/ul>\n<p class=\"center\"><img loading=\"lazy\" decoding=\"async\" height=\"368\" alt=\"IIS SSL server certificate - internet services manager\" width=\"532\" src=\"\/media\/images\/windows2003\/iis\/ssl-IIS1.gif\" \/><\/p>\n<ul>\n<li>Open the properties window for the website. You can do this by right clicking on the Default Website and selecting Properties from the menu.<\/li>\n<li>Open <strong>Directory Security <\/strong>by right clicking on the Directory Security tab<\/li>\n<\/ul>\n<p class=\"center\"><img loading=\"lazy\" decoding=\"async\" height=\"458\" alt=\"IIS SSL server certificate - default properties\" width=\"461\" src=\"\/media\/images\/windows2003\/iis\/ssl-IIS2.gif\" \/><\/p>\n<ul>\n<li>Click <strong>Server Certificate<\/strong>. The following Wizard will appear:<\/li>\n<\/ul>\n<p class=\"center\"><img loading=\"lazy\" decoding=\"async\" height=\"363\" alt=\"IIS SSL server certificate - pending request\" width=\"482\" src=\"\/media\/images\/windows2003\/iis\/ssl-IISCertInstall1.gif\" \/><\/p>\n<ul>\n<li>Choose to <strong>Process the Pending Request<\/strong> <strong>and<\/strong> <strong>Install the Certificate<\/strong>. Click <strong>Next<\/strong>.<\/li>\n<li>Enter the location of your IIS SSL certificate (you may also browse to locate your IIS SSL certificate), and then click <strong>Next<\/strong>.<\/li>\n<li>Read the summary screen to be sure that you are processing the correct certificate, and then click <strong>Next<\/strong>.<\/li>\n<li>You will see a confirmation screen. When you have read this information, click <strong>Next<\/strong>.<\/li>\n<li>You now have an IIS SSL server certificate installed.<\/li>\n<\/ul>\n<p><strong>Important: You must now restart the computer to complete the install<\/strong><\/p>\n<p>You may want to test the Web site to ensure that everything is working correctly. Be sure to use when you test connectivity to the site.<\/p>\n<p><a name=\"ts\"><\/a><br \/><strong>Troubleshooting<\/strong><\/p>\n<p>If you get a security message when viewing the site under https, check the certificate path. If the path does not contain the <strong>UTN-USERfirst-Hardware<\/strong> and <strong>PostiveSSLCA<\/strong>, similar to this:<br \/>\u00a0<\/p>\n<p><img loading=\"lazy\" decoding=\"async\" height=\"150\" alt=\"\" width=\"223\" border=\"0\" src=\"\/media\/images\/windows2003\/iis\/cert_path_ng.gif\" \/><\/p>\n<p>Then the intermediate certificates are not properly installed, please check the portion of these instructions regarding the <a href=\"http:\/\/192.168.178.50\/pages\/microsoft\/installing-intermediates-chain-certificates.php#inter\"><u><font color=\"#0000ff\">installa<br \/>\ntion of the intermediate certificates<\/font><\/u><\/a>.<\/p>\n<p><strong>The proper path looks like this in Internet explorer:<br \/><\/strong><img decoding=\"async\" alt=\"\" border=\"0\" src=\"\/media\/images\/windows2003\/iis\/ie_onestepssl_cert_path.gif\" \/> <strong>OR this in firefox<\/strong><img decoding=\"async\" alt=\"\" border=\"0\" src=\"\/media\/images\/windows2003\/iis\/firefox_onestepssl_cert_path.gif\" \/><\/p>\n","protected":false},"excerpt":{"rendered":"<p>This post was most recently updated on December 11th, 2018Problem How do I install the intermediate (chain) certificates on IIS 6? ResolutionThis guide will show you how to install the Intermediate (or chaining) Certificates onto your server when using IIS 5 or IIS 6.\u00a0 In these instructions, you will use MMC (Microsoft Management Console) to [&hellip;]<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[1],"tags":[],"class_list":["post-116","post","type-post","status-publish","format-standard","hentry","category-uncategorized"],"_links":{"self":[{"href":"https:\/\/www.bleuanus.nl\/index.php\/wp-json\/wp\/v2\/posts\/116","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.bleuanus.nl\/index.php\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.bleuanus.nl\/index.php\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.bleuanus.nl\/index.php\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/www.bleuanus.nl\/index.php\/wp-json\/wp\/v2\/comments?post=116"}],"version-history":[{"count":1,"href":"https:\/\/www.bleuanus.nl\/index.php\/wp-json\/wp\/v2\/posts\/116\/revisions"}],"predecessor-version":[{"id":241,"href":"https:\/\/www.bleuanus.nl\/index.php\/wp-json\/wp\/v2\/posts\/116\/revisions\/241"}],"wp:attachment":[{"href":"https:\/\/www.bleuanus.nl\/index.php\/wp-json\/wp\/v2\/media?parent=116"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.bleuanus.nl\/index.php\/wp-json\/wp\/v2\/categories?post=116"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.bleuanus.nl\/index.php\/wp-json\/wp\/v2\/tags?post=116"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}