Download and Import the Signed Identity Certificate (MMC)

Last Updated : Apr 12, 2022 |

  1. After approval and generation, receive/download the certificate files from the CA. There should be two or more files:

    • The signed identity certificate which needs to be in PKCS#7/P7B or PEM format

    • Zero, one or more intermediate certificates in PEM format

  2. The root certificate should be downloaded in PEM and DER format and put aside for later distribution to IP Office systems.

  3. Copy all to the original CSR directory.

  4. See Certificate File Naming and File Formats for more information on certificate file formats.

  5. On the same server the certificate request was created on, open the MMC Certificates snap-in for the Local Computer account.

  6. Expand Certificates (Local Computer).

  7. Right-click Personal, then click Select All Tasks > Import.

  8. Click Next.

  9. Browse and select the signed identity certificate received from the CA, then click Open.

  10. Ensure that these options are always selected:

    • Mark the Private Key Exportable

    • Import all Extended Properties

    • Import all Certificates in the Chain

  11. Click Next.

  12. Select Place all certificates in the following store. Under Certificate Store, make sure Personal is selected. and click Next.

  13. Complete the Certificate Import Wizard and click Finish.

  14. Check there is a key icon on the new certificate, if not the private key is not present.

  15. Repeat the import process to import the intermediate certificate file(s); there will be no key icon with these new certificates. Again these must go into the Personal certificate store.

  16. Select the identity certificate and click Open, select Details and verify the content are as expected. Select Certification Path and verify all the certificates are present to the root certificate.

Related information
Creating a CSR using Microsoft MMC Certificates Snap-in