This information teaches you how to prepare a stand-alone workstation or laptop (or image) to work with the SecureAuth IdP solution. These instructions include the installation of the ActiveX browser add-on for native certificate delivery in Internet Explorer as well as the PKI certificate chain to ensure user personal certificates are trusted.

Local Administrator rights are required for the installation of the add on and certificates.


Install the SecureAuth PKI Certificate needed for user personal certificates

1. Using Internet explorer, browse to and select the SecureAuth Utilities link.


2. Select the Certificates file.  When the “What do you want to do with the Certificates “ Dialogue opens select “Save as”.


3. Save the file locally to the workstation/laptop or to a central location for future use.

4. Expand the Certificates file in the local or central location it was saved.


The file expands to show two files.  Certificates Installer.ex_ and Certificates Installer.msi.

5. Rename the Certificates Installer.ex_ to Certifcates Installer.exe.

6. Execute the Certificates Installer.exe file by double clicking it. Select “Run”


7. The following Certificates are now installed in the Native Certificate Store which is shared with all user profiles. You can use the certificate MMC Snap-in or view the certificates in Internet Explorer.

Intermediate Certification AuthoritiesTrusted Root Certification Authorities
MFA Issuer 3 BannerMFA Root 3
MFA Issuer 3 RitterSecureAuth Root Certificate Authority
MFC Issuer 3 Nevada 
 MFC Issuer 3 Sierra 
 SecureAuth Intermediate CA 1A 


Install the SecureAuth ActiveX Browser plugin

1. Using Internet explorer, browse to “The IE Active-X (32 & 64-bit) SecureAuth Install MSI and Admin Guide” here:

2. Select the appropriate link for 32 or 64 bit operating systems and save the file locally to the workstation/laptop or to a central location for future use.


3. Execute the SecureAuthMSI64.msi for 64 bit systems ( or SecureAuthMSI.msi for 32 bit systems) by double clicking it. Select “Next”.


4. Accept the default folder and verify “Everyone” is selected the select the “Next” button



5. You will see “Installation Complete” on the next dialogue.  Select the Close button to complete the installation.  Note: You can verify the installation by opening “Program and Features” from the Control panel and scroll down to see “SecureAuthMSI64” or “SecureAuthMSI”.

You have now prepared the workstation / Laptop (or image) by installing all the required certificates and the ActiveX add on.

See these other related topics:

How to manually install SecureAuth CA Certificates using the Published CRT files -

IE Active-X (32 & 64-bit) SecureAuth Install MSI and Admin Guide -