User manual

4 Select the certicate le and click Open.
To display your certicate le type, you can select its le format from the File name drop-down menu.
5 Type the password for the private key that is included in the certicate le.
6 Select Mark this key as exportable.
7 Select Include all extendable properties.
8 Click Next and click Finish.
The new certicate appears in the  (Local Computer) > Personal >  folder.
9 Verify that the new certicate contains a private key.
a In the  (Local Computer) > Personal >  folder, double-click the new
certicate.
b In the General tab of the Certicate Information dialog box, verify that the following statement
appears: You have a private key that corresponds to this certificate.
What to do next
If necessary, import the root certicate and intermediate certicates into the Windows certicate store. See
“Import Root and Intermediate Certicates for the HTML Access Agent,” on page 14.
Congure the appropriate registry key with the certicate thumbprint. See “Set the Certicate Thumbprint
in the Windows Registry,” on page 15.
Import Root and Intermediate Certificates for the HTML Access Agent
If the root certicate and intermediate certicates in the certicate chain are not imported with the SSL
certicate that you imported for the HTML Access Agent, you must import these certicates into the
Windows local computer certicate store.
Procedure
1 In the MMC console on the View desktop, expand the  (Local Computer) node and go to the
Trusted Root  Authorities >  folder.
n
If your root certicate is in this folder, and there are no intermediate certicates in your certicate
chain, skip this procedure.
n
If your root certicate is not in this folder, proceed to step 2.
2 Right-click the Trusted Root  Authorities >  folder and click All Tasks >
Import.
3 In the Certicate Import wizard, click Next and browse to the location where the root CA certicate is
stored.
4 Select the root CA certicate le and click Open.
5 Click Next, click Next, and click Finish.
6 If your server certicate was signed by an intermediate CA, import all intermediate certicates in the
certicate chain into the Windows local computer certicate store.
a Go to the  (Local Computer) > Intermediate  Authorities > 
folder.
b Repeat steps 3 through 6 for each intermediate certicate that must be imported.
Using HTML Access
14 VMware, Inc.