3.0.1

View Manager Administration Guide
84 VMware, Inc.
3UnderthePersonaltab,selectthecertificateyouwishtouseandclickView.
4UndertheCertificationPathtab,selectthecertificateatthetopofthetreeandclick
ViewCertificate.
5UndertheDetailstabclickCopytoFile.YouarepresentedwiththeCertificate
ExportWizard.
6ClickNext>N
ext,andenteranameandlocationforthefileyouwanttoexport.
7ClickNext.Thefileissavedasarootcertificateinthelocationspecified.
Trust Hierarchies
Ausercertificatemaybesignedaspartofatrusthierarchy—thesigningcertificatemay
itselfbesignedbyanother,higherlevel,certificate.
Whileitispermittedtouseanysigningcertificatefromanywherewithinthehierarchy,
itisbestpracticetousetheparentcertificate(theonethatactuallysignedtheus
er
certificate)asyourrootcertificate.
Adding a Root Certificate to Trusted Roots on Active Directory
Thissectiondescribeshowtoimportthethird‐partyrootCAcertificatesintoboth
ActiveDirectoryandtheEnterpriseNTAuthstore.Theproceduresdescribedbeloware
onlyrequiredifyouareusingathird‐partyCAtoissuesmartcardlogonordomain
controllercertificates—theyarenotrequiredinenvironmentswheretheWi
ndows
DomainControlleractsastheRootCA.
To add the third-party root CA to the trusted roots in an Active Directory Group
Policy object
1ClickStart>AllPrograms>AdministrativeTools>ActiveDirectoryUsersand
Computers.
2Intheleftpane,locatethedomaininwhichthepolicyyouwanttoeditisapplied.
3Right‐clickthedomain,andthenclickProperties.
4UndertheGroupPo
licytab,clicktheDefaultDomainPolicyGroupPolicyobject,
andthenclickEdit.Anewwindowisdisplayed.
N
OTEIftheusercertificateisnotpresentinthelistyoumustfirstclicktheImport
buttontomanuallyimporttheusercertificate.Oncethecertificatehasbeen
imported,selectitfromthelistandclickView.