To Import SSL Certificate via MMC:
- Login to EAC Server machine.
- Go to EAC %ProgramFiles% folder and copy the SSL Certificate .PEM file to a shared location, or to the local temporary folder of the target computer.
- Login to the target computer and open MMC (mmc.exe).
- In the MMC, click File menu and select Add/Remove Snap-in.
- Select Certificates and click Add> button to move it to the Selected snap-ins: column.
- Select Computer account and click Next button.
- Select Local Computer: (the computer this console is running on) and click Finish.
- Click OK to go back to MMC.
- Expand the Certificates (Local Computer) and go to Trusted Root Certificate > Certificates folder.
- Click Action menu and go to All Tasks > Import...
- Click Next to follow steps in the Certificate Import Wizard.
- Browse the file name of the SSL Cert .PEM file that was copied in step #2. Click Next>twice.
Change the file type to display with the "All Files (*.*)" to be able to view the TMAC_CA_Cert.pem certificate file.
- Click Finish to close the wizard and OK when the "The import was successful." dialog box appears.
- In the Certificates folder, look for the "Trend Micro internal CA" to verify if SSL Certificate import is successful or not.
To Import SSL Certificate via GPO:
- Login to EAC Server machine.
- Go to EAC %ProgramFiles% folder and copy the SSL Certificate .PEM file to a shared location or to the local temporary folder of the Domain Controller.
- Log on to the Domain Controller.
- Click Start, point to Administrative Tools, and then click Group Policy Management.
- In the console tree, double-click Group Policy Objects in the forest and domain containing the Default Domain Policy Group Policy object (GPO) that you want to edit.
- Right-click the Default Domain Policy GPO, and then click Edit.
- In the Group Policy Management Console (GPMC), go to Computer Configuration > Windows Settings > Security Settings, and then click Public Key Policies.
- Right-click the Trusted Root Certification Authorities store.
- Click Import and follow the steps in the Certificate Import Wizard to import the certificates.
- Browse the file name of the SSL Cert .PEM file that was copied in step #2. Click Next>twice.
Change the file type to display with the "All Files (*.*)" to be able to view the TMAC_CA_Cert.pem certificate file.
- Click Finish to close the wizard and OK when the "The import was successful." dialog box appears.
- Login to one of the domain computers and look for the "Trend Micro internal CA" in the Certificates MMC to verify if SSL Certificate import is successful or not.