Ask a Question

Advanced Search

Solution ID : SO19140

Last Modified : 05/02/2018

How to install the 2048-bit Code Signing root and intermediate CA certificates?

Solution

For Microsoft Vista and Windows 7 users:

Due to hardening of the Vista operating system, the root certificate must be manually imported using the Microsoft Management Console (MMC)

Install the VeriSign G5 Root CA Certificate

  1. Download the VeriSign G5 Root CA certificate, click here > G5 Root
  2. Click Save
  3. In the Save As window, click Save
  4. From the Download complete, click Close
  5. In the lower left hand menu, click Start > All Programs > Accessories > Command Prompt
  6. From the command prompt window, type mmc
  7. Hit the Enter key
  8. User Access Control window will appear and click Continue
  9. From the console root, click File > Add/Remove Snap-in
  10. From the list, select Certificates
  11. Click Add > Computer Account > Local Computer > Finish > OK
  12. From the left tree, expand Console Root > Certificates (Local Computer) > Trusted Root Certification Authorities > Certificates
  13. Right-click Certificates > All Tasks > Import
  14. A certificate import wizard will appear and click Next
  15. Click Browse and browse to the location of the root certificate (for example, C:\Users\<user_profile>\Downloads)
  16. Select VeriSign_Root_VeriSign_Class_3_Public_Primary_Certification_Authority_–_G5.cer
  17. Click Open > Next
  18. By default, Place all certificates in the following store: Trusted Root Certification Authorities is selected
  19. Click Next > Finish
  20. A Security Warning will appear and click Yes
  21. A message will appear The import was successful and click OK
  22. Close the Console1 mmc windows (you do not need to save changes)
     

Install the VeriSign Code Signing 2010 CA Certificate (may not be required)

  1. Download the VeriSign Class 3 Code Signing 2010 CA certificate, click here > Code Signing 2010
  2. Click Save
  3. In the Save As window, click Save
  4. From the Download complete, click Close
  5. In the lower left hand menu, click Start > All Programs > Accessories > Command Prompt
  6. From the command prompt window, type mmc
  7. Hit the Enter key
  8. User Access Control window will appear and click Continue
  9. From the console root, click File > Add/Remove Snap-in
  10. From the list, select Certificates
  11. Click Add > Computer Account > Local Computer > Finish > OK
  12. From the left tree, expand Console Root > Certificates (Local Computer) > Intermediate Certification Authorities > Certificates
  13. Right-click Certificates > All Tasks > Import
  14. A certificate import wizard will appear and click Next
  15. Click Browse and browse to the location of the root certificate (for example, C:\Users\<user_profile>\Downloads)
  16. Select VeriSign_Class_3_Code_Signing_2010_CA.cer
  17. Click Open > Next
  18. By default, Place all certificates in the following store: Trusted Root Certification Authorities is selected
  19. Click Next > Finish
  20. A Security Warning will appear and click Yes
  21. A message will appear The import was successful and click OK
  22. Close the Console1 mmc windows (you do not need to save changes)


For Windows XP users:

Install the VeriSign G5 Root CA Certificate

  1. Download the VeriSign G5 Root CA certificate, click here > G5 Root
  2. Click Save
  3. In the Save As window, click Save
  4. From the Download complete, click Close
  5. In the lower left hand menu, click Start > All Programs > Accessories > Command Prompt
  6. From the command prompt window, type mmc
  7. Hit the Enter key
  8. User Access Control window will appear and click Continue
  9. From the console root, click File > Add/Remove Snap-in
  10. Click the Add button
  11. From the list, select Certificates
  12. Click Add > Computer Account > Local Computer > Finish > Close > OK
  13. From the left tree, expand Console Root > Certificates (Local Computer) > Trusted Root Certification Authorities > Certificates
  14. Right-click Certificates > All Tasks > Import
  15. A certificate import wizard will appear and click Next
  16. Click Browse and browse to the location of the root certificate (for example, C:\Users\<user_profile>\Downloads)
  17. Select VeriSign_Root_VeriSign_Class_3_Public_Primary_Certification_Authority_–_G5.cer
  18. Click Open > Next
  19. By default, Place all certificates in the following store: Trusted Root Certification Authorities is selected
  20. Click Next > Finish
  21. A Security Warning will appear and click Yes
  22. A message will appear The import was successful and click OK
  23. Close the Console1 mmc windows (you do not need to save changes)
     

Install the VeriSign Code Signing 2010 CA Certificate (may not be required)

  1. Download the VeriSign G5 Root CA certificate, click here > Code Signing 2010
  2. Click Save
  3. In the Save As window, click Save
  4. From the Download complete, click Close
  5. In the lower left hand menu, click Start > All Programs > Accessories > Command Prompt
  6. From the command prompt window, type mmc
  7. Hit the Enter key
  8. User Access Control window will appear and click Continue
  9. From the console root, click File > Add/Remove Snap-in
  10. Click the Add button
  11. From the list, select Certificates
  12. Click Add > Computer Account > Local Computer > Finish > Close > OK
  13. From the left tree, expand Console Root > Certificates (Local Computer) > Intermediate Certification Authorities > Certificates
  14. Right-click Certificates > All Tasks > Import
  15. A certificate import wizard will appear and click Next
  16. Click Browse and browse to the location of the root certificate (for example, C:\Users\<user_profile>\Downloads)
  17. Select VeriSign_Class_3_Code_Signing_2010_CA.cer
  18. Click Open > Next
  19. By default, Place all certificates in the following store: Trusted Root Certification Authorities is selected
  20. Click Next > Finish
  21. A Security Warning will appear and click Yes
  22. A message will appear The import was successful and click OK
  23. Close the Console1 mmc windows (you do not need to save changes)