How to Install ECC SSL Certificates

To Install and Configure Your ECC SSL / TLS Certificate:

1. Install your ECC SSL Certificate in to the Certificate Store.
2. Install the ECC intermediate certificate in to the Certificate Store.
3. Associate your ECC SSL Certificate with its private key.
4. Configure your Microsoft server software to use the ECC SSL Certificate.

   
   

How to Import Your ECC SSL Certificate into the Certificate Store

1. On the Microsoft server where you created the ECC CSR, open the ZIP file containing your ECC SSL Certificate and save the contents of the file (i.e. your_domain_name.cer).
2. Open Microsoft Management Console as an admin.
   1. On the Windows Start screen, type mmc.
   2. Right-click on mmc.exe and then click Run as administrator.
   3. In the User Account Control window, click Yes to allow the program to make changes to the computer.
3. In the MMC Console, in the console tree, expand Certificates > Intermediates, right-click on the Certificates folder, and then, click All Tasks > Import.
4. In the Certificate Import Wizard, on the Welcome to the Certificate Import page, click Next.
5. 
6. On the File to Import page, click Browse to browse for and select the .crt certificate file (e.g. your_domain_com.crt) that you saved to your server, click Open, and then, click Next.
7. 
8. On the Certificate Store page, do the following:
   1. Select Place all certificates in the following store.
   2. Click Browse.
   3. In the Select Certificate Store window, select Personal.
   4. Click OK.
   5. On the Certificate Store page, click Next.
   
9. On the Completing the Certificate Import page, review your settings and then, click Finish.
10. 
11. Your ECC SSL Certificate should now be in the Certificate Store.

How to Import the ECC Intermediate Certificate in to the Certificate Store

1. Open Microsoft Management Console as an admin.
   1. On the Windows Start screen, type mmc.
   2. Right-click on mmc.exe and then click Run as administrator.
   3. In the User Account Control window, click Yes to allow the program to make changes to the computer.
2. In the MMC Console, in the console tree, expand Certificates > Intermediate Certification Authorities, right-click on the Certificates folder, and then, click All Tasks > Import.
3. 
4. In the Certificate Import Wizard, on the Welcome to the Certificate Import page, click Next.
5. 
6. On the File to Import page, click Browse to browse for and select the XYZ CA.crt file that you saved to your server, click Open, and then, click Next.
7. 
8. On the Certificate Store page, do the following
   1. Select Place all certificates in the following store.
   2. Click Browse.
   3. In the Select Certificate Store window, select Intermediate Certification Authorities.
   4. Click OK.
   5. On the Certificate Store page, click Next.
   
9. On the Completing the Certificate Import page, review your settings and then, click Finish.
10. 
11. Your XYZCA.crt intermediate certificate should now be in the Certificate Store.

How to Associate Your ECC SSL Certificate with its Private Key

1. Locate your ECC SSL Certificate and record the serial number.
   1. Open Microsoft Management Console as an admin.
      1. On the Windows Start screen, type mmc.
      2. Right-click on mmc.exe and then click Run as administrator.
      3. In the User Account Control window, click Yes to allow the program to make changes to the computer
   2. In the MMC Console, in the console tree, expand Certificates > Personal and then click Certificates.
   3. In center pane double-click your ECC SSL Certificate
   4. In the Certificate window, on the Details tab, click Serial number and record your certificate's serial number.
   5. 
2. Open the Command Prompt as an admin.
   1. On the Windows Start screen, type cmd.
   2. Right-click on Command Prompt and then click Run as administrator.
   3. In the User Account Control window, click Yes to allow the program to make changes to the computer
3. In the Administrator: Command Prompt window, type the following command, making sure to put your certificate's serial number in quotes and to remove all spaces:<strong>certutil -repairstore my "serial number"</strong>

4. You should see the following confirmation message:<strong>certutil: –repairstore command completed successfully</strong>

Configure Server Software to Use the ECC SSL Certificate

After you have imported your ECC SSL Certificate, you need to configure your Microsoft server to use it to secure your website or email connections. Follow the instructions for your specific server platform.