How to install a certificate to call an external service

Installing a certificate to use with an external service.

In my previous company I needed a set of instructions for anyone to use when installing an Experian certificate on a server. This certificate was required when calling the Experian servers from a WCF service hosted in IIS. These instructions can be reused for other similar scenarios.

Now we need to add the certificate.

  1. Click Start > Run...
  2. Type MMC and click OK
  3. Click Yes and the Management Console will open.
  4. Select File > Add Remove Snap-in.
  5. Double-click on Certificates.
  6. Select Computer Account and click Next then Finish.
  7. Click OK.
  8. Expand the Certificates (Local Computer).
  9. Right-click on Personal, select All Tasks and Import.
  10. Browse to the location of the certificate you are using. You may need to change the type of files to "All files".
  11. Click OK.
  12. Click Next.
  13. Enter the password (if required). the UAT certificate password is "password".
  14. Click Next and Finish.
  15. Click on the Personal > Certificates folder.
  16. Drag and drop the Intermediate certificate to the Intermediate Certification Authorities > Certificates folder.
  17. Drag and drop the Trusted Root CA to the Trusted Root Certification Authorities > Certificates folder.
  18. Now we need to make sure the Network Service has the permission to use the certificate.
  19. Still in MMC, expand the Personal > Certificates folder.
  20. Right-click on the certificate supplied and select All Tasks > Manage Private Keys...
  21. Click Add and in the object names text box enter NETWORK SERVICE.
  22. Click OK and OK again.
  23. Close the MMC. No need to save console settings.


One more thing. I highly recommend you use the Smoke Tester to do some basic tests on the certificate after installation.

Comments are closed