To set up this trust, the clients must trust the root of the server’s certificate. This means, clients have to possess the certificate of the certification authority that issued the server certificate in their Trusted Root Certification Authorities store. You can observe this store via the Certificates snap-in.
The process is mandatory if you are using a certificate not issued by a third part vendor.
To install the server root certificate, do the following on the client.
To install the root Certificate on the client
Open the Certificates snap-in console. If you have not previously added in the Certificates snap-in console, you can achieve this by doing the following:
• Click Start, select Run, type mmc, and then tap OK.
• On the File menu, choose Add/Remove Snap-in.
• In the Add or Remove Snap-ins dialog box, in the Available snap-ins file, choose Certificates, and then click Add.
• In the Certificates snap-in dialog box, select Computer account, and at that time click Next.
• In the Select Computer dialog box, click Local computer: (the computer this console is running on), followed by selecting Finish.
• In the Add or Remove snap-ins dialog box, click OK.
In the Certificates snap-in console, in the console tree, double click to show more items on Certificates (Local Computer), repeat previous step with Trusted Root Certification Authorities, right-click Certificates, and focus on All Tasks, followed by selecting Import.
- Once you get to the Welcome to the Certificate Import Wizard page, select Next.
- On the File to Import page, in the File name box, indicate the title of the server root certificate, then select Next.
- On the Password page, if you created a pass phrase for the private key linked with the certificate previously, enter the pass phrase.
- On the Certificates Store page, allow the default selection (Place all certificates in the following store – Trusted Root Certification Authorities), followed by choosing Next.
On the Completing the Certificate Import Wizard page, verify that the certificate settings appear as followed:
• Certificate Store Selected by User: Trusted Root Certification Authorities
• Content: Certificate
• File Name: FilePath\, where is the name of the server root certificate.
- Once the certificate upload has successfully concluded, a confirmation message will show up proving the import was successful. Select OK.
- With Certificates chosen in the console hierarchy, in the detail panel, confirm that the root certificate of the server has become visible in the file of certificates on the client.
This process can be modified on client computers to use website certificates, remote desktop certificates, and Exchange certificates.