THE INFORMATION IN THIS ARTICLE APPLIES TO:

• EFT, version 7 and later

QUESTION

How can I chain a certificate in CRT format?

ANSWER

To chain a cert, first verify that the certificate is trusted and signed by a Certificate Authority (CA). If this has not been done, you must generate a self-signed cert within EFT and then send the .csr [certificate signing request] to a CA such as Verisign or Go Daddy.

A detailed procedure is described in the attached PDF.

MORE INFORMATION

The certificate chain is essentially a certificate path from signed certificate to intermediate to CA root certificate to indicate that the certificate is trusted.

http://msdn.microsoft.com/en-us/library/windows/desktop/aa376515(v=vs.85).aspx

http://en.wikipedia.org/wiki/Certification_path_validation_algorithm

In some environments, Java and other applications may have difficulty validating the certificate chaining path if only the signed cert is provided.

Chaining a certificate makes it easier for Java and other applications in some environments to validate the certificate validity path. A chained certificate has all of the certificate in the certificate path chain in one file.