Cryptography Tutorials - Herong's Tutorial Examples - v5.40, by Dr. Herong Yang
Importing CA Certificate into IE
This section provides a tutorial example on how to use IE to import a CA certificate into the 'Trusted Root Certification Authorities' certificate store.
After exporting certificates from IE, I want to test the certificate import function of IE. First I want to import my own self-signed certificate, herong.crt, generated in previous tutorials as a CA certificate into IE.
1. Run IE in administrator mode and click the settings icon, then select "Internet Options". The Internet Options dialog box shows up.
2. Click the "Content" tab and the "Certificates" button. The Certificates dialog box shows up.
3. Click the "Trusted Root Certification Authorities" tab, and click the "Import..." button. The Certificate Import Wizard shows up.
4. Click the "Next" button. The File to Import step shows up.
5. Use the "Browse" button to find and select herong.crt. Then click the "Next" button. The Certificate Store step shows up.
6. Keep the default certificate store selection: "Trusted Root Certificate Authorities", and click the "Next" button. The confirmation step shows up.
7. Click the "Finish" button. The Security Warning message shows up.
You are about to install a certificate from a certificate authority (CA) claiming to represent: Herong Yang Windows cannot validate that the certificate is actually from "Herong Yang". You should confirm its origin by contacting "Herong Yang". The following number will assist you in this process: Thumbprint (sha1): 59FB31E9... Warning: If you install this root certificate, Windows will automatically trust any certificate issued by this CA. Installing a certificate with an unconfirmed thumbprint is a security risk. If you click "Yes" you acknowledge this risk. Do you want to install this certificate?
8. Click the "Yes" button. My self-signed certificate will be installed as a trusted root certificate.
Table of Contents