|
In order for your computer to trust your certiifcate, you must have the ORC ECA Certificate
"Trust Chain" properly installed on you computer.
The Certificate "Trust Chain" consists of all the Certificate Server Certificates that
are involved in the authority under which your certificate was issued. Your certificate request
was digitally signed by an Intermediate Certificate Authority Certificate Server. The ORC ECA
Certificate Server digitally signed your certificate with its Intermediate Certificate Authority
Certificate. That Certificate was itself signed by the DoD's ECA Root Authority Certificate.
So the "Trust Chain" is a heirarchy of certificates: ECA Root CA then to ORC ECA CA then to your
ECA certificate.
Since there are several certificates in the ORC ECA "Trust Chain" and since some of those
certificates have (in the past) been superceded by nearly identical certificates; this procedure
will be performed in two increments. First, you will remove all of the ORC ECA "Trust Chain"
certificates currently installed on your computer. (This will remove any of the superceded
certificates, if you have them.) Then you will import (install) all of the correct ORC ECA
"Trust Chain" certificates. (You will only install the good ones.)
|
| |
| Removing the ORC ECA Certificate "Trust Chain" |
| |
| For MSIE 5.5 to 6.x: |
| |
|
1. Click on the "Tools" menu option and then click "Internet
Options...".
|
| |
|
| |
| For MSIE 7.x: |
| |
|
1. Click on the "Tools" menu option and then click "Internet
Options...".
|
| |
|
| |
| 2. Select the Content tab, then click the
Certificates... button. |
| |
 |
| |
3. In the Certificates dialogue box, click the Trusted Root Certification
Authorities tab.
Scroll down and search for an entry labeled “ECA Root CA” in the "Issued To" column.
For each entry found, follow Steps 4 and 5. When there are no more "ECA Root CA" entries
proceed to Step 6.
Note: If you find multiple entries, then you definitely have a
problem that you are in the process of fixing. If you do not find any entries that is also a
problem which you are fixing.
|
| |
 |
| |
| 4. Select the "ECA Root CA" entry and click the Remove button. |
| |
 |
| |
| 5. In the Certificate dialogue box, click the Yes button. |
| |
 |
| |
6. In the Certificates dialogue box, click the Intermediate Certification
Authorities tab.
Scroll down and search for an entry labeled "ORC ECA" in the "Issued To" column.
For each entry found, follow Steps 7 and 8. When there are no more "ORC ECA" entries
proceed to Step 9.
Note: If you find multiple entries, then you definitely have a
problem that you are in the process of fixing. If you do not find any entries that is also a
problem which you are fixing. |
| |
 |
| |
|
7. Select the "ORC ECA" entry and click the Remove button.
|
| |
 |
| |
| 8. In the Certificate dialogue box, click the Yes button. |
| |
 |
| |
| 9. In the Certificates dialogue box, click the Close button. Then click
the OK button in the Internet Options dialogue box.
|
| |
 |
| |
| Importing the ORC ECA Certificate "Trust Chain" |
| |
| 10. Go to http://eca.orc.com
|
| |
|
| |
|
11. From the menu on the left hand side of the web page, select Certificate
Repository and then ECA Root Certificate. Click ECA Root Certificate.
|
| |
 |
| |
| 12. In the Security Alert dialogue box, click the Yes button. |
| |
 |
| |
|
13. In the File Download dialogue box, click the Open button.
|
| |
 |
| |
|
14. In the Certificate dialogue box, click the Install Certificate... button.
|
| |
 |
| |
|
15. In the Certificate Import Wizard, click Next >, Next >, and Finish.
|
| |
|
| |
| 16. In the Security Warning dialogue box, click the Yes button.
|
| |
|
| |
|
17. At "The import was successful."; click the OK button. Then , click the OK button
on the Certificate dialogue box to make it dissapear.
|
| |
 |
| |
| 18. From the menu on the left hand side of the web page, select Certificate
Repository and then CA Signing Certificate. Click CA Signing Certificate. |
| |
 |
| |
|
19. In the File Download dialogue box, click the Open button.
|
| |
 |
| |
|
20. In the Certificate dialogue box, click the Install Certificate... button.
|
| |
 |
| |
|
21. In the Certificate Import Wizard, click Next >, Next >, and Finish.
|
| |
|
| |
|
22. At "The import was successful."; click the OK button. Then , click the OK
button on the Certificate dialogue box to make it dissapear.
|
| |
 |
| |
|
23. You have succesfully installed the ORC ECA Trust Chain. Please perform
a Certificate Test
to see if this has resolved any problem you may have bee experiencing. |