Ask a Question

Advanced Search

Solution ID : SO22016

Last Modified : 05/18/2018

Managed PKI for SSL - Intermediate Certificate Authority (CA) Installation Instructions for Microsoft IIS and Exchange


To install the Symantec Intermediate CA certificate on Microsoft IIS Web servers, as well as on Exchange systems, perform the following steps:

Step 1:  Download the updated
Symantec Intermediate CA certificate
  1. Download the Intermediate CA certificate from this link.
  2. Select the appropriate Intermediate CA certificate for your SSL Certificate type.
    NOTE: If you are not sure which certificate you have purchased, follow these steps from this link.
  3. Copy the Intermediate CA certificate and paste it on a Notepad. 
  4. Make sure there are 5 dashes to either side of the BEGIN CERTIFICATE and END CERTIFICATE and that no white spaces, extra line breaks or additional characters have been inadvertently added.
  5. Save the file as intermediate.cer.
Step 2:  Create a Certificate Snap-in
  1. From the Web server, click Start > Run.
  2. In the text box, type MMC.
  3. Click OK.
  4. From the Microsoft Management Console (MMC) menu bar, select Console (in IIS 5.0) or 
    File (in IIS 6.0, 7 and 8) > Add/Remove Snap-in.
  5. Click Add.
  6. From the list of snap-ins, select Certificates.
  7. Click Add.
  8. Select Computer account.
  9. Click Next.
  10. Select Local computer (the computer this console is running on) .
  11. Click Finish.
  12. In the snap-in list window, click Close.
  13. In the Add/Remove Snap-in window, click OK.
  14. Save these console settings for future use.


Step 3:  Install the new Intermediate CA certificate

  1. From the left pane, click Intermediate Certification Authorities.
  2. Right-click Certificates.
  3. Click All Tasks > Import.
  4. A Certificate Import Wizard, click Next.
  5. Select the first Intermediate CA Certificate file.
  6. Click Next.
  7. Select Place all certificates in the following store: Intermediate Certification Authorities.
  8. Click Next.
  9. Click Finish.
  10. Restart the IIS services (iisreset).