PKI Tutorials - Herong's Tutorial Examples - v2.20, by Dr. Herong Yang
Outdated: Importing Root Certificate from a File to IE 8
This section provides a tutorial example on how to use IE 8 to import a root CA certificate into the 'Trusted Root Certification Authorities' certificate store.
One way to fix the issue shown in the previous tutorial is to import the root certificate "GTE CyberTrust Global Root" back into IE 8 from the certificate file I created earlier.
1. Run IE 8 and click the "Tools" > "Internet Options" menu. The Internet Options dialog box shows up.
2. Click the "Content" tab and the "Certificates" button. The Certificates dialog box shows up.
3. Click the "Trusted Root Certification Authorities" tab, and click the "Import..." button. The Certificate Import Wizard shows up.
4. Click the "Next" button. The File to Import step shows up.
5. Use the "Browse" button to find and select \temp\GTE_Root_CA_base64.cer Then click the "Next" button. The Certificate Store step shows up.
6. Keep the default certificate store selection: "Trusted Root Certificate Authorities", and click the "Next" button. The confirmation step shows up.
7. Click the "Finish" button. The Security Warning message shows up.
You are about to install a certificate from a certificate authority (CA) claiming to represent: GTE CyberTrust Global Root Windows cannot validate that the certificate is actually from "GTE CyberTrust Global Root". You should confirm its origin by contacting "GTE CyberTrust Global Root". The following number will assist you in this process: Thumbprint (sha1): 97817950... Warning: If you install this root certificate, Windows will automatically trust any certificate issued by this CA. Installing a certificate with an unconfirmed thumbprint is a security risk. If you click "Yes" you acknowledge this risk. Do you want to install this certificate?
8. Click the "Yes" button. "GTE CyberTrust Global Root" certificate will be installed as a trusted root certificate.
9. Reopen IE 8 with visit https://login.yahoo.com again. The certificate error will go away.
Table of Contents