Skip to main content

Determine Correct Intermediates Bundle for SSL Certificate

Some SSL providers include multiple intermediatesintermediate certificate bundles along with your SSL certificate. Your SSL certificate must be merged with onethe ofcorrect theseintermediate intermediatesbundle bundles along withand your private key to generate athe .p12 certificate file that can be uploaded intoin the Mobile preferences tab of the FileWave Admin. If the incorrectwrong intermediatesintermediate bundle is used, two steps will appear during interactive MDM enrollment rathermay thanshow one,an likeextra incertificate-install thestep screenshotbefore below.Enroll IfDevice, the incorrect intermediates bundle is used,and client devices willmay not be able to communicate with the FileWave MDM server correctly. ThereA should normally only be one step listed, the one to "Enroll Device", if there are no certificatehealthy trust chain issues.normally shows only the Enroll Device step.

MissingIntermediates.pngMDM enrollment showing an extra Install Certificate step

Step-by-step guide

Follow the steps below to determine the correct intermediates bundle to pair with your SSL certificate so that only one step appears on the interactive enrollment page.

  1. Be sure to choose Apache format whenWhen downloading your SSL certificate from the your provider.provider, choose Apache format if that option is available. If the certificate files do not have a .crt extensionextension, redownloaddownload them again and pickin Apache format this time.format.
  2. Go to the Intermediate Certificate Check page at https://tools.keycdn.com/ssl.
  3. Paste the contents of yourthe SSL .crt file from your SSL provider.
  4. Follow it up withPaste the contents of the desired intermediatesintermediate .crt filebundle rightdirectly below it. The intermediatesintermediate bundle may contain multiple certificates.certificates; Copy and paste them all intoinclude the Intermediatefull Certificate Check pagebundle below your SSL certificate.
  5. Click the Validate button.
  6. You'llThe receivechecker a response statingreturns either "No chain issues detected" in greendetected or "Chain issues detected" in brown.detected. If there are chain issues keepare replacingdetected, repeat the intermediatescheck with the next intermediate bundle withfrom anotheryour oneprovider. untilUse therethe are no chain issues. The intermediatesintermediate bundle that results inreturns no chain issues is the one you need to use when generating yourthe .p12 file for FileWave.

decoder.pngIntermediate Certificate Check showing no chain issues detected

decoder2.pngIntermediate Certificate Check showing chain issues detected