Browsers ships with certificates from well-known commercial CAs. If your web servers use certificates signed by your own CA, your CA certificate must be exported to every browser on every client system that will be connecting to an SSL-enabled web server.
To import a new CA into Firefox 1.5
- Launch Firefox and choose Preferences from the Edit menu.
- Click the Advanced button.
- Select the Security pane.
- Click the View Certificates button.
- Click the Authorities tab.
- Click the Import button at the bottom of the screen.
- Navigate to the CA certificate and import it.
- Click the "Trust this CA to identify web sites." checkbox
- Click the "Trust this CA to identify email users." checkbox
- Click the "Trust this CA to identify software developers." checkbox
- Click the "OK" button
To import a new CA into Firefox 3.0
- Launch Firefox and choose Preferences from the Edit menu.
- Click the Advanced button.
- Select the Encryption pane.
- Click the View Certificates button.
- Click the Authorities tab.
- Click the Import button at the bottom of the screen.
- Navigate to the CA certificate and import it.
- Click the "Trust this CA to identify web sites." checkbox
- Click the "Trust this CA to identify email users." checkbox
- Click the "Trust this CA to identify software developers." checkbox
- Click the "OK" button
To import a new CA into Internet Explorer 6
- Obtain the certificate file from your administrator and save it locally
- Right click the certificate and select Install Certificate - Next
- Choose Place all certificates in the following store - Browse
- Highlight Show Physical Stores
- Expand "Trusted Root Certification Authorities"
- Highlight Local Computer - OK - Next - Finish
- Press OK when you are notified the import is successful
- Open Internet Explorer. You should not receive the security alert when accessing the https enabled web server. This means the CA is now trusted.
To import a new CA into Internet Explorer 7
- Obtain the certificate file from your administrator and save it locally
- Right click the certificate and select Install Certificate - Next
- Choose the "Place all certificates in the following store" radion button, - Browse
- Click the "Trusted Root Certification Authorities" list item, - OK
- "Certificate Store" - Next - Finish
- Press OK when you are notified the import is successful, and press OK again to finish the process.
- Open Internet Explorer. You should not receive the security alert when accessing the https enabled web server. This means the CA is now trusted.
In this WWU computer helpdesk page, there are some screenshots for importing the certificate into different browsers.