{"id":140,"date":"2016-01-19T09:57:46","date_gmt":"2016-01-19T09:57:46","guid":{"rendered":"http:\/\/www.pkipartner.support\/?page_id=140"},"modified":"2016-01-19T10:31:03","modified_gmt":"2016-01-19T10:31:03","slug":"ssl-exporting-and-restoring-a-pfx-file-to-iis","status":"publish","type":"page","link":"https:\/\/pkipartner.com\/support\/ssl-exporting-and-restoring-a-pfx-file-to-iis\/","title":{"rendered":"SSL- Exporting and Restoring a PFX file to IIS"},"content":{"rendered":"

Exporting and Restoring a PFX file to IIS<\/h1>\n

Export certificate and private key to PFX (Personal File Exchange) format<\/p>\n

Certificate Snap-in<\/strong><\/p>\n

1. Open up the Microsoft Management Console (MMC).
\nStart -> Run -> Type “mmc” (without quotes) and Click OK<\/strong> or hit Enter on your keyboard.<\/p>\n

\"1<\/p>\n

2. Open Add\/Remove<\/strong> Snap-in Window.
\nFile -> Add\/Remove Snap-in<\/strong><\/p>\n

\"2<\/p>\n

3. Add the Certificates Snap-in.
\nClick Add<\/strong> then double-click Certificates<\/strong><\/p>\n

\"3<\/p>\n

\"4<\/p>\n

4. Select Computer Account<\/strong> and click Next<\/strong>.<\/p>\n

\"5pfx\"<\/p>\n

Note<\/strong>: This step is very important. It must be the Computer Account<\/strong> and no other
\naccount!
\n5. Select Local<\/strong> Computer<\/strong> and click Finish<\/strong><\/p>\n

\"6<\/p>\n

6. Close the Add Standalone Snap-in<\/strong> window and click OK<\/strong> in the Add\/Remove Snapin\u00a0<\/strong>Window.
\n7. Click the + (plus)<\/strong> sign next to Personal<\/strong> and click on the Certificates<\/strong> folder<\/p>\n

\"7<\/p>\n

Export Process<\/h3>\n

1. Right-Click on the certificate that is to be exported and select All Tasks -> Export<\/strong>
\n2. When the Certificate Export Wizard<\/strong> starts, click Next<\/strong> on the Welcome Page.<\/p>\n

\"8<\/p>\n

3. Select Yes, export the private key<\/strong> and then click Next<\/strong><\/p>\n

\"9<\/p>\n

4. Leave the default settings that the window presents and click Next<\/strong>.<\/p>\n

\"10<\/p>\n

Note<\/strong>: These are the default settings, but put a check in the box labeled “Include all
\ncertificates in the chain if possible” and leave the rest as is.<\/p>\n

5. Type and confirm a password for the PFX file and then click Next<\/strong>.<\/p>\n

\"11<\/p>\n

Note<\/strong>: Instead of typing in a location you can Browse<\/strong> to a location to save it to by clicking the\u00a0Browse<\/strong> button.<\/p>\n

7. A confirmation page will be displayed upon completion of the previous step. Click Finish\u00a0<\/strong>to complete the export process.<\/p>\n

\"12<\/p>\n

You will now have PFX file which is ready for transport. This file typically contains just your\u00a0certificate and private key rolled into one file.
\nNote<\/strong>: If you selected Include all certificates in the certification path if possible, then your\u00a0file will contain the full certificate chain with the private key and end entity\/domain\u00a0certificate.<\/p>\n

Import Process<\/h3>\n

Note<\/strong>: The following steps require you to be inside the Certificate Snap-in part of the MMC, if\u00a0you are not already there please follow the section above titled Certificate Snap-in.<\/strong><\/p>\n

1. Right-Click on folder labeled Certificates<\/strong> under the Personal<\/strong> folder and select All Tasks->\u00a0<\/strong>Import
\n<\/strong>
\nImport Certificate Wizard appears<\/p>\n

\"13<\/p>\n

2. When the Certificate Import Wizard<\/strong> starts click Next
\n<\/strong>
\n3. Browse or type in a location for the PFX file.<\/p>\n

\"14<\/p>\n

4. Type the password to the PFX file in the provided box and click Next<\/strong>.<\/p>\n

\"15<\/p>\n

Note<\/strong>: If you need to re-back up this key when imported, then make sure the box Mark this\u00a0<\/strong>key as exportable<\/strong>… is checked-off.<\/p>\n

5. Select Automatically select the certificate store based on the type of certificate<\/strong> and click\u00a0Next<\/strong>.
\n6. On the Completing the Certificate Import Wizard<\/strong> page, click Finish<\/strong><\/p>\n

\"16<\/p>\n

7. Close the MMC and in case you are prompted, it is not necessary to save the changes.
\nYou have now successfully completed the Certificate Import wizard.<\/p>\n

Placing newly imported certificate into IIS 5.x & 6.x<\/h3>\n
    \n
  1. Open the IIS Manager<\/li>\n
  2. Right-click on the site that you would like to use the certificate and select Properties<\/strong>.<\/li>\n
  3. Click on the Directory Security<\/strong> tab and click on the Server Certificate<\/strong> button.<\/li>\n
  4. Follow the wizard.<\/li>\n
  5. If there is already a certificate on the website select Replace<\/strong> and then click Next<\/strong>.
    \nNote<\/strong>: If this site does not have a certificate on it already then click Assign<\/strong>… and then
    \nclick Next<\/strong>.<\/li>\n
  6. Finish the certificate wizard.<\/li>\n
  7. Restart Website<\/li>\n<\/ol>\n

    Placing newly imported certificate into IIS 7.x<\/h3>\n
      \n
    1. Open IIS (Start -> Administrative Tools -> IISM -> Server Name)<\/li>\n
    2. Open Web Sites<\/strong> by left-clicking the tiny triangle to the left of Web Sites.<\/strong><\/li>\n
    3. Single left-click on the Web Site name. Example<\/strong>: Default Web Site.<\/li>\n
    4. Select Bindings<\/strong> from the Edit<\/strong> Site sub menu. (see image)<\/li>\n<\/ol>\n

      \"17<\/p>\n

      5. In the next window to come up, single left-click on the type https<\/strong> to select.
      \n6. Click Edit<\/strong>.
      \n7. Select the appropriate SSL certificate from the SSL certificate<\/strong> drop-down box.
      \n8. Click OK<\/strong> to save changes.
      \n9. Verify certificate is working on Web Site by visiting the site in your web browser.<\/p>\n

      Related Articles<\/h3>\n

      Root and Intermediate Certificate installation via MMC<\/a>
      \nCertificate Installation: IIS 7.x<\/p>\n

       <\/p>\n","protected":false},"excerpt":{"rendered":"

      Exporting and Restoring a PFX file to IIS Export certificate and private key to PFX (Personal File Exchange) format Certificate Snap-in 1. Open up the Microsoft Management Console (MMC). Start -> Run -> Type “mmc” (without quotes) and Click OK or hit Enter on your keyboard. 2. Open Add\/Remove Snap-in\u2026<\/p>\n

      Continue reading<\/span><\/i><\/a> <\/p>\n","protected":false},"author":1,"featured_media":0,"parent":0,"menu_order":0,"comment_status":"closed","ping_status":"closed","template":"","meta":{"footnotes":""},"_links":{"self":[{"href":"https:\/\/pkipartner.com\/support\/wp-json\/wp\/v2\/pages\/140"}],"collection":[{"href":"https:\/\/pkipartner.com\/support\/wp-json\/wp\/v2\/pages"}],"about":[{"href":"https:\/\/pkipartner.com\/support\/wp-json\/wp\/v2\/types\/page"}],"author":[{"embeddable":true,"href":"https:\/\/pkipartner.com\/support\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/pkipartner.com\/support\/wp-json\/wp\/v2\/comments?post=140"}],"version-history":[{"count":3,"href":"https:\/\/pkipartner.com\/support\/wp-json\/wp\/v2\/pages\/140\/revisions"}],"predecessor-version":[{"id":160,"href":"https:\/\/pkipartner.com\/support\/wp-json\/wp\/v2\/pages\/140\/revisions\/160"}],"wp:attachment":[{"href":"https:\/\/pkipartner.com\/support\/wp-json\/wp\/v2\/media?parent=140"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}