Red Hat CERTIFICATE SYSTEM 8.0 - ADMINISTRATION Admin Manual page 98

Chapter 4. Requesting, Enrolling, and Managing Certificates
NOTE
This configuration is not necessary to use Internet Explorer 7 and 8 on Microsoft Windows
2000, 2003, or XP.
1. Open Internet Explorer.
2. Import the CA certificate chain.
a. Open the unsecure end services page for the CA.
http://server.example.com:9180/ca/ee/ca
b. Click the Retrieval tab.
c. Click Import CA Certificate Chain in the left menu, and then select Download the CA
certificate chain in binary form.
d. When prompted, save the CA certificate chain file.
e. In the Internet Explorer menu, click Tools, and select Internet Options.
Open the Content tab, and click the Certificates button.
f.
g. Click the Import button. In the import window, browse for and select the imported certificate
chain.
The import process prompts for which certificate store to use for the CA certificate chain.
Select Automatically select the certificate store based on the type of certificate.
h. Once the certificate chain is imported, open the Trusted Root Certificate Authorities tab to
verify that the certificate chain was successfully imported.
3. After the certificate chain is imported, Internet Explorer can access the secure end services pages.
Open the secure site.
https://server.example.com:9443/ca/ee/ca
4. There is probably a security exception when opening the end services pages. Add the CA services
site to Internet Explorer's Trusted Sites list.
a. In the Internet Explorer menu, click Tools, and select Internet Options.
b. Open the Security tab, and click Sites to add the CA site to the trusted list.
c. Set the Security level for this zone slider for the CA services page to Medium; if this security
setting is too restrictive in the future, then try resetting it to Medium-low.
5. Close the browser.
To verify that Internet Explorer can be used for enrollments, try enrolling a user certificate, as
Section 4.3.1, "Requesting and Receiving a User or Agent Certificate through the End-
described in
Entities Page".
76