Export SSL Root and Intermediate Chains with SSL Certificate

Description of Issue

Exporting the SSL Certificate to include the SSL Root and Intermediate chain certificates to reapply the newly exported certificate to Time and Attendance again.

Context
  • Time and Attendance SSL Configuration
  • Updating Expired SSL certificates
  • MMC
  • Microsoft Management Console
Cause

Informational


Resolution
  1. Open Microsoft Management Console (Start > Run > MMC)
    1. Click File > Add/Remove Snap In
    2. Select Certificates and click Add
    3. Select Computer Account > Next > Local computer > Finish
    4. Click OK
  2. Certificates (Local) > Personal  > Certificates
  3. Double click the certificate you are installing and browse to the certification path tab and make a note of the names of the root an intermediate certificates
  4. On the left-hand side, expand Certificates (Local) > Trusted Root Certification Authorities > Certificates
  5. Find the Root Chain for Certification Authority
  6. Right-click and select Copy
  7. Navigate back to Certificates (Local) > Personal  > Certificates
  8. Right-click and select Paste to paste the certificate in this location
  9. Back on the left-hand side, expand Certificates (Local) > Intermediate Certification Authorities > Certificates
  10. Find Intermediate Chain
  11. Right-click and select Copy
  12. Navigate back to Certificates (Local) > Personal  > Certificates
  13. Right-click and select Paste to paste the certificate in this location
  14. Highlight all 3 certificates including the new SSL certificate, the newly copied root and intermediate certificates at the same time and right-click and select All tasks → Export
    1. On the Certificate Export Wizard, click Next
    2. Select Yes, export the private key
    3. Click Next
    4. Ensure that Personal Information Exchange - PKCS #12 (.PFX) is selected
    5. Select Include all certificates in the certifiction path if possible
    6. Select Export all extended properties
    7. Click Next
    8. Check the box for Password
    9. Enter the password for the new SSL Certificate in both the Password and Confirm Password fields
    10. Click Next
    11. Select the Browse button
    12. Navigate to the desired location and in the File name field, enter ETCert.pfx
    13. Select Save
    14. Click Next
    15. Click Finish
  15. The new exported certificate, which includes the Root and Intermediate certificates, is ready to be applied.