Windows does not have enough information to verify this certificate

Q: We are upgrading our website from windows 2003 IIS 6 to windows 2008 IIS7. I import the certificate from windows 2003 and export it in the windows 2008. However, if I double click on the certificate, the Certificate information shows 'Windows does not have enough information to verify this certificate'.

If I add the https in binding, I receive this message:

One or more intermediate certificates in the certificate chain are missing. To resolve this issue, make sure that all of intermediate certificates are installed. For more information, see http://support.microsoft.com/kb/954755

Resolution: we got answer from thawte:

To install the intermediate certificates into the IIS servers, please view the following:

Step 1:

Download the Intermediate certificates applicable to your product:

Note: You MUST install correct thawte Intermediate CA file on your server for your SSL certificate to work and be fully supported in all web browsers.

SSL123:

Thawte DV SSL

Thawte Primary Root CA 2020

SSL Web Server / SSL Web Server Wildcard:

Thawte SSL CA

Thawte Primary Root CA 2020

SGC:

Thawte SGC Intermediates (certificate requested before 10.10.2010)

Thawte SGC CA - G2 and VeriSign Class 3 Public Primary Certification Authority - G5 (certificate requested after 10.10.2010)

Thawte Extended Validation:

Thawte Extended Validation SSL CA

Thawte Primary Root CA 2020

When saving the intermediate certificates change the .pem extension to .cer or .crt.

Step 2:

Add Certificate Snap-in within IIS: SO1849

Step 3: Installing the Thawte Primary Root CA and Intermediate CA

Note: Follow the same steps below to import the Thawte Primary Root CA and Intermediate or your certificate will not work correctly.

1) Open the Microsoft Management Console (MMC)
2) Click on Certificates from the left pane
3) Double-click on Intermediate Certification Authorities from the right pane
4) Right-click on Certificates folder from the right pane and select All Tasks > Import to open the Certificate Import Wizard
5) Click on the Next button
6) Specify the location of the Thawte Primary Root CA by browsing to it and click on the Next button
7) By default, it will place the certificate in the Intermediate Certification Authorities store. Keep this selection and click on the Next button.
8) Click on the Finish button
9) A message will appear confirming the successful import of the certificate. Click on the OK button.

Note: Please ensure that you have followed the same steps above to import the Intermediate CA as well.

Step 4: Check the following for the SSL123, SSL Web Server/ Wildcard, Extended Validation:

With MMC and the Certificates snap-in still open, expand the Trusted Root Certification Authorities folder on the left and select the Certificates sub-folder.

Locate the following certificate:

Issued to: thawte Primary Root CA

Issued by: thawte Primary Root CA

Expiration Date: 7/16/2036

Serial Number: 34 4e d5 57 20 d5 ed ec 49 f4 2f ce 37 db 2b 6d

If this certificate is present, it must be disabled.

For the SGC certificate please check:
Issued to: VeriSign Class 3 Public Primary Certification Authority - G5
Issued by: VeriSign Class 3 Public Primary Certification Authority - G5
Expiration Date: 7/16/2036
Serial Number: 18 da d1 9e 26 7d e8 bb 4a 21 58 cd cc 6b 3b 4a

If this certificate is present, it must be disabled.

1) Right click the certificate

2) Select Properties

3) In the Certificate purposes section, select Disable all purposes for this certificate

4) Click OK

Close MMC - there is no need to save console settings.

Step 5: Verify certificate installation

Stop and start your Web server prior to any testing.
Note: In some cases the changes may not take place after restarting IIS Services and a re-boot is needed.
To verify the SSL certificate installation, use the Thawte Certificate Installation checker utility