1. Home
  2. Code Signing Certificate Support
  3. CSR Generation for Code Signing Certificates
  4. Configure Internet Explorer 7, 8, 9, & 10 for Code Signing Certificate Generation

Configure Internet Explorer 7, 8, 9, & 10 for Code Signing Certificate Generation

For Code Signing certificates from any Certificate Authority:

You can use Internet Explorer to generate your Code Signing certificate. The best version to use would be Internet Explorer 11.

For Symantec and Thawte Code Signing certificates:

If you need to use Internet Explorer versions 7, 8, 9, or 10, you may need to follow these steps to allow the browser to generate the certificate.

Microsoft Internet Explorer 10

Step 1: Add the certificate generation page as a Trusted Site

After opening your Internet Explorer browser, open the menu by clicking the gear icon in the top right corner.

1. In the menu, Click Tools > Internet Options.

2. Click Security tab > Trusted Sites > Sites.

3. Add the following sites to the trusted sites list:

  • https://products.websecurity.symantec.com
  • https://products.websecurity.digicert.com
  • https://products.thawte.com
  • Authentic Document IDs for BREW – https://brew.websecurity.symantec.com

4. Click Add.

Note: If the Add button is disabled, check with your local IT administrator for assistance adding the sites. 

5. Click Close > OK.

Step 2: Enable Compatibility Mode

1. Right click on the top bar and select Menu bar.

2. Click Tools > Compatibility View settings

3. Check Display all websites in Compatibility View.

4. Click Close > OK.

Once you’re done with this step, close and re-open the browser before generating your certificate.

Microsoft Internet Explorer 7, 8, & 9

1. From the menu bar, click Tools > Internet Options > Security
2. Select Trusted sites zone
3. Click Sites
4. Add the following sites to the trusted sites list:

  • https://products.websecurity.symantec.com
  • https://products.websecurity.digicert.com
  • https://products.thawte.com
  • Authentic Document IDs for BREW – https://brew.websecurity.symantec.com

5. Click Add for the website added to the zone > click Close > click OK
6. In the Security tab, click the Custom Level button
7. Under ActiveX controls and plug-ins, set the following ActiveX options:

  • Automatic prompting for ActiveX controls: Enable
  • Binary and script behaviors: Enable
  • Download signed ActiveX controls: Prompt
  • Download unsigned ActiveX controls: Prompt
  • Initialize and script ActiveX controls not marked safe: Prompt
  • Run ActiveX controls and plug-ins: Enable
  • Script ActiveX controls marked safe for scripting: Enable

9. Under Downloads, check these settings:

  • Automatic prompting for file downloads: Enable
  • File Download: Enable

10. Click OK > OK
11. Close the Internet Explorer windows and restart your browser before generating your certificate.

Note: If generation still does not work, there may be a cache issue. Follow these steps to clear your cache:

1. Open Internet Explorer
2. From the menu bar, click Tools > Internet Options > General
3. Under Browsing history click Delete.
4. Check the following boxes:

  • Temporary Internet files
  • Cookies
  • History
  • Form data
  • Passwords
  • InPrivate Filtering data

5. Click Delete.
6. Once the cache is cleared, close and re-open Internet Explorer and try to generate your certificate again.

Updated on

Was this article helpful?

Related Articles