> ## Documentation Index
> Fetch the complete documentation index at: https://docs.superoffice.com/llms.txt
> Use this file to discover all available pages before exploring further.

# How to configure certificates in the Windows certificate store

> How to configure certificates in the Windows certificate store

Let's look at how to configure your certificates in a Windows certificate store. This is necessary to enable your application to validate all SAML and JWT tokens issued by SuperOffice CRM Online.

In this procedure, you will need the 3 SuperOffice [development environment certificates][1]

![x][img1]

You find these in the [certificates download][2]. *SuperOfficeOnline.crt* is stored in the *RootCertificate* folder, the 2 trusted people certificates are stored in the *environment* folder.

This procedure **must be completed on all computers that will be hosting your application in all 3 environments**: [development, stage, and production][3]. If you don't have access to the certificate store, you need to implement a [programmatic override][4] to validate the certificates.

## Import root and environment certificates

**Pre-requisites:**

* you have [added the Certificates snap-in][5]

**To import certificates:**

1. Open the Microsoft Management Console (MMC).

2. Select **Certificates (Local Computer)**.

3. Start the certificate import wizard:

   1. Right-click **Trusted Root Certification Authorities**
   2. Point to **All Tasks**
   3. Select **Import**
   4. Click **Next**

   ![x -screenshot][img2]

4. Select the certificate file from disk and click **Next**.

   ![x -screenshot][img3]

5. Select **Place all certificates** and click **Next**.

   ![x -screenshot][img4]

6. Click **Finish**.

   ![x -screenshot][img5]

<Note>
  Remember to step through this procedure for both *SuperOfficeRoot.crt* and the *SuperOffice\{Environment}.crt* certificates!
</Note>

## Import subject (login) certificates

**Pre-requisites:**

* you have added the Certificates snap-in
* you have imported the root and environment certificates

**To import subject certificates:**

1. Open the Microsoft Management Console (MMC).

2. Select **Certificates (Local Computer)**.

3. Start the certificate import wizard:

   1. Right-click **Trusted People**
   2. Point to **All Tasks**
   3. Select **Import**
   4. Click **Next**

4. Select *SuperOfficeFederatedLogin.crt* from disk and click **Next**.

5. Select **Place all certificates** and click **Next**. Then click **Finish**.

## How do I verify that certificates are configured correctly?

On the computer in each hosting environment:

1. Open MMC.
2. Select **Certificates (Local Computer)**.
3. Select the certificates folder of **Trusted People**.
4. Select the federated login certificate for your environment.
5. Verify the hierarchy on the **Certificate Path** tab.
6. Verify the thumbprint on the **Details** tab.

![x -screenshot][img6]

<Note>
  Following image shows Stage certificate
</Note>

![x -screenshot][img7]

[1]: ./index

[2]: ../../../../../downloads/api/superofficeonlinecertificates.zip

[3]: ../../../../developer-portal/getting-started/app-envir

[4]: ./override-resolver

[5]: ./add-certificate-snap-in

[img1]: /media/loc/en/api/authentication/certificates.png

[img2]: /media/loc/en/api/authentication/welcomewizard.png

[img3]: /media/loc/en/api/authentication/certificateimport.png

[img4]: /media/loc/en/api/authentication/certificateimport2.png

[img5]: /media/loc/en/api/authentication/completeimportwizrd.png

[img6]: /media/loc/en/api/authentication/certificatechain.png

[img7]: /media/loc/en/api/authentication/certthumbprint.png


## Related topics

- [How to install the Certificate snap-in on Windows](/en/api/authentication/online/certificates/add-certificate-snap-in.md)
- [New certificate](/en/developer-portal/create-app/config/new-certificate.md)
- [How to override the certificate resolver](/en/api/authentication/online/certificates/override-resolver.md)
- [Application environments](/en/developer-portal/getting-started/app-envir.md)
- [Troubleshooting Database Mirroring](/en/online/mirroring/troubleshooting.md)
- [Create your first application and connect to SuperOffice web services](/en/developer-portal/getting-started/quickstart.md)