Before setting up an MS SharePoint account, you need to install the certificates (root,
intermediate and non-root) to the trusted root certificate authorities of the local
computer and to the partitionManaging Trust Relationships in MS SharePoint.
Adding Certificates to Trusted Root Certificate Authorities
Each certificate must be imported to the trusted root certificate authorities of the local computer on each of the farm servers.
To do this, follow these steps::
In the menuStart click the buttonRun and enter mmc.
In the menuConsole select the itemAdd or remove a snap-in.
In the windowTo add or remove a snap-in, selectCertificates and clickAdd.
In the windowIn the Certificate Manager snap-in, select Computer accounts and clickFurther.
Select Local computer and clickDone.
Back in the windowTo add or remove a snap-in, click OK.
In the console window, expand the nodeCertificates (local computer).
Right-click the nodeTrusted root Certificate authorities, and then select the following items:All tasks
andImport.
Select the certificate and clickFurther.
In subsequent windows, do not change the default settings, and then clickDone. You should see a message stating that
the import was successful.
Repeat steps 8–10 for each of the certificates.
Adding Certificates to MS SharePoint
After the certificates are installed on the local computer, you need to add them to the sectionManage trust relationships
in SharePoint. You only need to do this on a single server, because the trust relationship operates across the entire farm. To add
certificates to the sectionManaging a trust relationship you need to do the following steps:
Open the SharePoint Admin Center, go to the tabSecurity and click the linkManaging trust relationships.
On the tapeTrust relationships select the commandCreate. A window opensEstablish a trust relationship.
In the sectionGeneral parameters specify a name for the certificate.
In the sectionThe root certificate for this trust relationship clickBrowse and select a certificate.
Click OK.
Repeat steps 1–5 for each of the certificates.
On the SharePoint front-end web server, run the IISReset command. To do this:
Installing certificates in MS SharePoint
