1. Log on to the computer where you installed a certificate (for example, gateway server or management server).

2. Start Internet Explorer, and connect to the computer hosting Certificate Services (for example, http://<servername>/certsrv).

3. On the Welcome page, click Download a CA Certificate, certificate chain, or CRL.

4. On the Download a CA Certificate, Certificate Chain, or CRL page, click install this CA certificate chain.

5. On the Potential Scripting Violation dialog box, click Yes.

6. When the CA Certificate Installation page is displayed, close Internet Explorer.

1. On the Windows desktop, click Start, and then click Run.

2. In the Run dialog box, type mmc and then click OK.

3. In the Console1 window, click File, and then click Add/Remove Snap-in.

4. In the Add/Remove Snap-in dialog box, click Add.

5. In the Add Standalone Snap-in dialog box, click Certificates, and then click Add.

6. In the Certificates snap-in dialog box, ensure that My user account is selected, and then click Finish.

7. In the Add Standalone Snap-in dialog box, click Add.

8. In the Certificates snap-in dialog box, select Computer account, and then click Next.

9. In the Select Computer dialog box, ensure that Local computer: (the computer this console is running on) is selected, and then click Finish.

10. In the Add Standalone Snap-in dialog box, click Close.

11. In the Add/Remove Snap-in dialog box, click OK.

12. In the Console1 window, expand Certificates - Current User, expand Trusted Root Certification Authorities, and then click Certificates.

13. In the right pane, right-click the CA certificate that you imported, and then click Copy.

14. Expand Certificates (Local Computer), expand Trusted Root Certification Authorities, right-click Certificates, and then click Paste.

Tasks

Concepts

Other Resources