you have to download the intermediate ca certificate / the certificate from which your certificate is "dependent".
When you have that certificate you have to import both certificates and then export the final certificate. In the export wizard you have to select that you want to export the extended properties.
(Works fine with server 2008 / 2008 R2 / Windows 7 certmgr.msc)
Now you have a certificate with the certificate chain.
Thanks for the help Faah. Are you saying that you import both, the SSL and the intermediate certificates, seperately and then export the just the SSL? Or do you need to past the SSL and intermediate certificates into a single file and import them, then export that certificate.
If it's not to much trouble could someone treat me like I have no idea what I'm doing and give me step by step instructions importing an SSL cert to EMM?
FYI after hours on the phone with mcafee I got this figured out and here's what I learned:
For anyone having trouble exporting a cert as a PFX, I've got 2 tips.
1) not only Complete certificate request, but ensure that all intermediate certs and CAs have been imported as well so that you have a complete certificate chain.
2) mcafee cannot necesarily help you export as a PFX but your certificate provider can. A call to mcafee may end up being hours of wasted time when a quick google or search of you providers site, or even a call to the provider will have an answer for you much faster. This is because each providers certs are slightly different.
Sorry for answering late
Your Step 1) is exactly what I meant
- Logon to Server 2003 / 2008
- open up an "mmc"
- add snapin "certificates"
- choose "local computer"
- import ssl certificate, import ca certificate, import intermediate certificate
- now export ssl certificate
- select to export extended properties in export wizzard (also select mark public key as exportable, due to emm needs it)
- save file
- import it in emm
Nachricht geändert durch faah on 12.03.12 20:13:34 MEZ
Sorry to resurrect this but I am also having the same issue.
For step 8, how do you save the file so it can be imported in EMM?
I beleive that you double click the cert in the certs mmc and click "save to file" or export or somthing like that and then save it as a PFX.
Also you're certificate provider support should be able to help you. I used godaddy and found out that they had a KB article on it.
All I see is export list which is a text file so I do not believe that is correct. I will have to contact godaddy. Any chance you can point me the KB article?
Great! Thanks for your help Mat. I was able to export and import the certificate into EMM and have successfully installed it. Now I just need to provision some devices =]