I am completing the certificate request in IIS, and getting the error "Certificate chain could not be built to a trusted root authority (HRESULT 0x800B010A)." How do I fix this?

Blog Post created by toleary on Aug 8, 2013

The error "The certficate chain could not be built to a trusted root authority (HRESULT 0x800B010A)" is due to the lack of an authority in the Trusted Root Certification Authorities store for the local computer (in this case, the server upon which the Pharos server software will be installed). An example of this error is found below:



You may also get this error if attempting to use the certificate as a "Bind" to HTTPS:


To resolve this condition, the Pharos Systems root certificate must first be installed on the server. Download the attached "Pharos.cer" certificate to the server and:

  1. Click Start > Run and type "certmgr.msc" (without the quotes).
  2. Expand the Trusted Root Certification Authorities node and select the Certfiicates node underneath.
  3. Right-click the Certificates node and choose All Tasks > Import. Click Next.
  4. Browse the location of the Pharos.cer file. Select it and then click Next.
  5. Select the "Place all certificates in the following store" option and then click the Browse button.
  6. Click in the "Show physical stores" box to check it and expand "Trusted Root Certification Authorities."
  7. Select the "Local Computer" option under Trusted Root Certification Authorities and click OK.
  8. Click Next and continue the import.


This should end successfully. At this point, you may start the import of the certificate supplied by Pharos for your installation.