Trusting Your Certificate OR Verifying the ECA "Trust Chain" - MSIE 5.5 and higher

 
 

 

Print this page for reference.
View/Download these instructions as a .pdf file.

In order for your computer to trust your certiifcate, you must have the ORC ECA Certificate "Trust Chain" properly installed on you computer.

The Certificate "Trust Chain" consists of all the Certificate Server Certificates that are involved in the authority under which your certificate was issued. Your certificate request was digitally signed by an Intermediate Certificate Authority Certificate Server. The ORC ECA Certificate Server digitally signed your certificate with its Intermediate Certificate Authority Certificate. That Certificate was itself signed by the DoD's ECA Root Authority Certificate. So the "Trust Chain" is a heirarchy of certificates: ECA Root CA then to ORC ECA CA then to your ECA certificate.

Since there are several certificates in the ORC ECA "Trust Chain" and since some of those certificates have (in the past) been superceded by nearly identical certificates; this procedure will be performed in two increments. First, you will remove all of the ORC ECA "Trust Chain" certificates currently installed on your computer. (This will remove any of the superceded certificates, if you have them.) Then you will import (install) all of the correct ORC ECA "Trust Chain" certificates. (You will only install the good ones.)

 
Removing the ORC ECA Certificate "Trust Chain"
 
For MSIE 5.5 to 6.x:
 

1. Click on the "Tools" menu option and then click "Internet Options...".

 
Select Tools, then Internet Options..
 
For MSIE 7.x:
 

1. Click on the "Tools" menu option and then click "Internet Options...".

 
Select Tools, then Internet Options..
 
2. Select the Content tab, then click the Certificates... button.
 
 
3. In the Certificates dialogue box, click the Trusted Root Certification Authorities tab.
Scroll down and search for an entry labeled “ECA Root CA” in the "Issued To" column.
For each entry found, follow Steps 4 and 5. When there are no more "ECA Root CA" entries proceed to Step 6.
 Note: If you find multiple entries, then you definitely have a problem that you are in the process of fixing. If you do not find any entries that is also a problem which you are fixing.
 
 
4. Select the "ECA Root CA" entry and click the Remove button.
 
 
5. In the Certificate dialogue box, click the Yes button.
 
 
6. In the Certificates dialogue box, click the Intermediate Certification Authorities tab.
Scroll down and search for an entry labeled "ORC ECA" in the "Issued To" column.
For each entry found, follow Steps 7 and 8. When there are no more "ORC ECA" entries proceed to Step 9.
 Note: If you find multiple entries, then you definitely have a problem that you are in the process of fixing. If you do not find any entries that is also a problem which you are fixing.
 
 
7. Select the "ORC ECA" entry and click the Remove button.
 
 
8. In the Certificate dialogue box, click the Yes button.
 
 
9. In the Certificates dialogue box, click the Close button. Then click the OK button in the Internet Options dialogue box.
 
 
Importing the ORC ECA Certificate "Trust Chain"
 
10. Go to http://eca.orc.com
 
 
11. From the menu on the left hand side of the web page, select Certificate Repository and then ECA Root Certificate. Click ECA Root Certificate.
 
 
12. In the Security Alert dialogue box, click the Yes button.
 
 
13. In the File Download dialogue box, click the Open button.
 
 
14. In the Certificate dialogue box, click the Install Certificate... button.
 
 
15. In the Certificate Import Wizard, click Next >, Next >, and Finish.
 


 
16. In the Security Warning dialogue box, click the Yes button.
 
 
17. At "The import was successful."; click the OK button. Then , click the OK button on the Certificate dialogue box to make it dissapear.
 
 
18. From the menu on the left hand side of the web page, select Certificate Repository and then CA Signing Certificate. Click CA Signing Certificate.
 
 
19. In the File Download dialogue box, click the Open button.
 
 
20. In the Certificate dialogue box, click the Install Certificate... button.
 
 
21. In the Certificate Import Wizard, click Next >, Next >, and Finish.
 


 
22. At "The import was successful."; click the OK button. Then , click the OK button on the Certificate dialogue box to make it dissapear.
 
 
23. You have succesfully installed the ORC ECA Trust Chain. Please perform a Certificate Test to see if this has resolved any problem you may have bee experiencing.


Return to Last Page    

 

 
