Server 2012 install missing ROOT Certificate and CA Certificate

Server 2012 install missing ROOT Certificate and CA Certificate

Since Windows Server 2012 comes with virtually no Root or CA certificates this makes it hard for SSL certs. to work from almost all of the SSL vendors out there. Hence resulting in Missing Chain Certs, or Certs. Not Valid or Google Chrome showing errors with HTTPS addresses.

To avoid this you need to install root and ca certs on your server.  You can get the basic Root and CA certs. from Comodo
 

1. Open up the Microsoft Management Console (MMC)

Start -> Run -> Type "mmc" (without quotes) and Click 'OK' or hit Enter on your keyboard.

 

2. Open 'Add/Remove Snap-in' Window

File -> Add/Remove Snap-in

 

3. Add the Certificates Snap-in

Click 'Add' then double-click 'Certificates'

 

4. Select 'Computer Account' and click 'Next'

Note: This step is very important. It must be the 'Computer Account' and no other account

 

5. Select 'Local Computer' and click 'Finish'

6. Close the 'Add Standalone Snap-in' window and click 'OK' in the 'Add/Remove Snap-in' Window.

 

7. Will now be returned to the MMC.

 

Install/Import the Root and Intermediates Certificate

 

* Root

 

1. Expand the Certificates section by clicking on the plus (+) sign and turn it to a minus (-) sign to expose the 'Certificates' tree.

 

2. Import the Root Certificate

Right-click on 'Trusted Root Certification Authorities', select 'All Tasks', then select 'Import'. 

Click 'Next'. 

Locate the Root Certificate and click Next. 

When the wizard is completed, click Finish. 

 

* Intermediate(s)

 

3. Import Intermediate(s)

The process is the exact same except the area of interest is 'Intermediate Certification Authorities' instead of 'Trust Root Certificate Authorities' and the file(s) that are to be imported are the remaining files outside of your domain certificate.

 

4. Restart Website through IIS.

    • Related Articles

    • Install SSL Certificate inside SolidCP

      Login to your SolidCP Control Panel 2. Click on Web Sites under your plan. 3.Click on the website to which you wish to install the SSL. 4. Choose SSL from the tabs on the next window. 5. If you already have the SSL click on Upload Certificate, ...

    • Failed to install SSL certificate

      We need a CSR or Private Key to proceed further, if you are moving an SSL cert from a previous server. The Private Key from the previous host is needed. If this is a new SSL they got from SSL vendor (for the first time for this site) please make sure ...

    • Purchase and Install SSL Certificates Utilizing HSphere

      Please follow the instructions below when purchasing/installing an SSL certificate with the domain utilizing HSphere: login to the account and please make sure the domain is utilizing a dedicated IP address. Changing to a dedicated IP will require ...

    • Purchase and Install SSL Certificates Utilizing HSphere

      Please follow the instructions below when purchasing/installing an SSL certificate with the domain utilizing HSphere: login to the account and please make sure the domain is utilizing a dedicated IP address. Changing to a dedicated IP will require ...

    • Renewing Your SSL Certificate (GoDaddy)

      Renewing your SSL is a multiple-step process that varies depending on your certificate type and where you host your website. Even if your SSL auto-renewed, you must still apply the renewal credit and complete a renewal request through your account. ...