After migrate(export and import http://shebangme.blogspot.com/2011/02/move-or-copy-ssl-certificate-from.html) ssl from Windows Server 2003 IIS to a new IIS server, the following 2 errors appears:
- the issuer of this certificate cannot be found
- Certificate cannot be verified up to a trusted certification authority?
SOLUTION: (talk to thawte tech support)
Install the thawte Intermediate CA file
Step 2 - Download the thawte Intermediate CA file for your SSL product type:
Note: You MUST install correct thawte Intermediate CA file on your server for your SSL certificate to work and be fully supported in all web browsers.Skip to step 3 If you have already downloaded the CA file otherwise select your SSL product type below to download the thawte Intermediate CA (Right Click on link & Save)
- SSL 123
- SSL Web Server or Wildcard
- SSL Web Server with EV
- SGC SuperCert (certificate requested before 10/10/2010)
- SGC SuperCert (certificate requested after10/10/2010)
- Trial SSL
Step 3 - Create a Certificate Snap-in:
Note: Please ensure for step 8 to select 'Computer Account', selecting any other option will result in a failed installation.- From the Web Server, Click Start > Run
- Type in MMC and Press Enter
- Click OK
- From the Microsoft Management Console (MMC) menu bar, Click File (in IIS 6.0) or Console (in IIS5.0) > Add/Remove Snap-in
- Click Add
- From the list of snap-ins, Select Certificates
- Click Add
- Select Computer Account
- Click Next
- Select Local Computer (the computer this console is running on)
- Click Finish
- In the snap-in list window, Click Close
- In the Add/Remove Snap-in Window, Click OK
Step 4 - Install the thawte Intermediate CA file:
- From the left pane, Expand the 'Intermediate Certification Authorities' folder
- Right-Click on 'Certificates' folder
- Click All Tasks > Import
- In the Certificate Import Wizard, Click Next
- Click on Browse and locate the Intermediate CA Certificate File (The PKCS#7 file you downloaded in step 2)
- Click Next
- Select option 'Place all certificates in the following store'
- Click Browse button and select 'Intermediate Certification Authorities'
- Click OK
- Click Next
- Click Finish
- Keep the Certifcate Snap-in open as you will need it to complete step 5.
Please download the Thawte Intermediate CAs for your SSL certificate here:
https://search.thawte.com/support/ssl-digital-certificates/index?page=content&id=AR1371
If you require the CA bundle version of the Intermediate CAs, please download it here:
https://search.thawte.com/support/ssl-digital-certificates/index?page=content&id=AR1372
3. CHECK INSTALLATION:
Ensure you have installed your certificate correctly at:
https://search.thawte.com/support/ssl-digital-certificates/index?page=content&id=SO9555
4. INSTALL THE THAWTE TRUSTED SEAL:
Additionally, as part of your SSL Certificate Service, you are entitled to display the Thawte Trusted Seal - recognised across the Internet and around the world as a symbol of authenticity, security, and trust - to build consumer confidence in your Web site.
Installation instructions for the Thawte Trusted Seal can be found on the following link:
http://www.thawte.com/ssl/secured-seal/installation-agreement/index.html
Visit the Thawte Support Web site, where you will find a range of support tools to help you:
https://search.thawte.com/support/ssl-digital-certificates/index.html
REFERENCES
https://search.thawte.com/support/ssl-digital-certificates/index?page=content&actp=CROSSLINK&id=SO15447