Knowledge Base

Installing the Root & Intermediate Certificates

For a positive ssl certificate, in addition to your domain certificate you will be receiving 3 more files.
These files must be imported in the following order:

• Root AddTrustExternalCARoot.crt
• Intermediate CA UTNAddTrustServerCA.crt
• Intermediate CA PositiveSSLCA.crt

Or click to download the root and Intermediate files
 

• Save these Certificates to the desktop of the webserver machine, then:
• Click the Start Button
• select Run
• type mmc
• Click OK

 

• Click File
• Select Add/Remove Snap in

 

• Select Add

 

• Select Certificates from the Add Standalone Snap-in box and click Add

 

• Select Computer Account (NOTE: This step is very important. It must be the computer account and no other account) and click Next

 

• Select Local Computer and select Finish

 

• Close the Add Standalone Snap-in box, click OK in the Add/Remove Snap in
• Return to the MMC
• To install the your Root Certificate:

      
 

• Right click the Trusted Root Certification Authorities
• Select All Tasks
• Select Import.

      
 

• Click Next.

      
 

• Locate the Root Certificate AddTrustExternalCARoot.crt
• click Next.
• When the wizard is completed
• click Finish.

To install the Intermediate Certificate/Certificates:
     
 

• Right click the Intermediate Certification Authorities
• select All Tasks
• select Import
• Complete the import wizard again, but this time locating the intermediate Certificate UTNAddTrustServerCA.crt when prompted for the Certificate file.

Once you have installed the UTNAddTrustServerCA.crt repeat the above process to install the PositiveSSLCA.crt

• Ensure that the Root certificate(AddTrustExternalCARoot.crt) appears under Trusted Root Certification Authorities
• Ensure that the intermediate certificates(UTNAddTrustServerCA.crt and PositiveSSLCA.crt) appears under Intermediate Certification Authorities
• Once these are installed you may need to restart the server.