Configuring Internet Explorer To Enroll Certificates - Red Hat CERTIFICATE SYSTEM 8 - AGENTS GUIDE Agents Manual

Chapter 1. Agent Services
• Additional notes (comments appended by the agent to the certificate)
NOTE
This support does not include supporting internationalized domain names.

1.8. Configuring Internet Explorer to Enroll Certificates

Because of the security settings in Microsoft Windows Vista, requesting and enrolling certificates
through the end entities pages using Internet Explorer 7 and 8 requires extra browser configuration.
The browser has to be configured to trust the CA before it can access the CA's secure end entities
pages.
NOTE
This configuration is not necessary to use Internet Explorer 7 and 8 on Microsoft Windows
2000, 2003, or XP.
1. Open Internet Explorer.
2. Import the CA certificate chain.
a. Open the unsecure end services page for the CA.
http://server.example.com:9180/ca/ee/ca
b. Click the Retrieval tab.
c. Click Import CA Certificate Chain in the left menu, and then select Download the CA
certificate chain in binary form.
d. When prompted, save the CA certificate chain file.
e. In the Internet Explorer menu, click Tools, and select Internet Options.
Open the Content tab, and click the Certificates button.
f.
g. Click the Import button. In the import window, browse for and select the imported certificate
chain.
The import process prompts for which certificate store to use for the CA certificate chain.
Select Automatically select the certificate store based on the type of certificate.
h. Once the certificate chain is imported, open the Trusted Root Certificate Authorities tab to
verify that the certificate chain was successfully imported.
3. After the certificate chain is imported, Internet Explorer can access the secure end services pages.
Open the secure site.
https://server.example.com:9444/ca/ee/ca
14