I am really lame here. Where do i find my root certificate?
Main Topics
Browse All TopicsThis is the error that I am getting in IIS on an Exchange 2007 Standard Edition 64 bit Server.
This CA Root Certificate is not trusted. To enable trust, install this certificate in the Trusted Root Cerification Authorities Store. How do i do this?
This Question has been solved and asker verified All Experts Exchange premium technology solutions are available to subscription members.
Experts Exchange has been collecting answers to technology questions since 1996…3 million and counting! If you have a question, chances are we already have your answer.
If you can't find the exact answer you're looking for, ask our exclusive community of 50,000 experts. You’ll get a personalized answer from a trusted professional.
Thousands of free tech tips, tricks, how-to’s and tutorials are available in our peer reviewed articles section. See for yourself how smart our experts are, no login required.
Access the answers to your technology questions today.
30-day free trial. Register in 60 seconds.
Members of the expert community talk about why the experience at Experts Exchange is different than what you will find anywhere else.

Try it out and discover for yourself.
30-day free trial. Register in 60 seconds.
Join the community of experts here and help other tech pros by answering question in your area of expertise. You can earn FREE access to all Experts Exchange's premium features and resources.
You can view the certificate, then install it, but this error may be due to exchange / iis using a self-signed certificate.
You would be best to either purchase a certificate (if you are planning to publish the exchange externally for Activesync or OWA), or generate a certificate using a Domain Root CA (a Certificate Services Server).
go to https://servername/certsrv
Onlyodin.
I have a cert that has been purchased. It is about to expire and I am simply trying to properly renew it. Expiration date is 5-2-9. I also have 2 other certs in the Personal folder. When viewed they have red x's through them that says "This CA Root certificate is not trusted. To enable trust, install this cerificate in the Trusted root Cerification Athorities Store".
When I right click on the purchased cert (which is also in the Personal-Cerificates folder) I have 4 choices
Request Cert with New Key
Request Cert with Same Key
Renew Cert with New Key
Renew Cert with Same Key
If I select Renew *, I get an error saying, "This certificate cannot be renewed because it does not contain enough information to generate a renewal request. Please request a new certificate"
If I select Request * , I get an error saying " The wizard cannot be started because of one or more of the following conditions:
There are no trusted certificatoin authourities (CAs) available
You don not have the permissions to request cerificates from the available CAs
The available CAs issue certicates for which you do not have permissions
If this is a purchased cert, you will need to go back to where you purchased it and purchase another one. You should be able to find who issued the cert by opening it and seeing where it says issued by:
Then you will need to generate a new request and then they can send you a new cert. This website is really good for assisting in requesting a new cert: https://www.digicert.com/e
My previous post was assuming that you had your own Enterprise CA. - Purchased certs are much better for the end user.
Contacting the cert vendor is probably easiest, but you can locate the correct CA certificates this way:
- double click to open up the certificate the you received from the vendor in your email
- details tab
- look through the list of attributes for "Authority Information Access" (AIA) and click to highlight it
- the bottom part of the window will show one or more locations to access the CA certificate that issued your SSL cert - click that and open it.
- details tab of the ca cert
- copy to file button
- follow the wizard to save to file
repeat this process until you get to the root certificate - this will not have an AIA listed. You can also confirm that it is the root by validating that the Subject and Issuer attributes have the same things listed. Copy this to file as well.
Since this is the web server, it is best to install all CA certificates, however only the root cert needs to be assigned to the trusted root certification authorities store - often this will end up there if you let windows decide, but if you have problems choose to select the store and browse, check the box for 'show physical stores' and then select the trusted root CA store.
Also note - you might question where you got the cert from if you don't trust the root for it yourself. If you don't already trust it - would you expect your customers to trust it (and thus trust your site with their money)?
If it is from godaddy, you may need to update your server to the latest service pack and that will have their root included. Alternatively, you can do windows update and look for the optional/recommended installs and look for the root certificate update. Since this is not critical or high severity, it doesn't always get installed by a lot of people, however most home users would have already applied the service pack by now, and root certs are updated automaticallly from microsoft upon first access in Vista/2008 and newer.
We are using Load Balancer named Radware(App Director) in our organisation. Today our application certificate was expired. so we have changed the new certificate,After changed new certificate our clients are not able to connect application. They are not able to connect application. They are getting the below error. " This CA Root Certificate is not trusted. To enable trust, install this certificate in the Trusted Root Cerification Authorities Store. How do i do this?"
Senthilkumar.R
Business Accounts
Answer for Membership
by: peralesaPosted on 2009-04-29 at 18:49:19ID: 24266314
you should be able to right click on the root certificate and select install, that should install the root cert!