sslsd-logo

How to move SSL Certificate from IIS 7 to IIS 7

Windows servers use .pfx/.p12 files to contain the public key file (SSL Certificate) and its unique private key file. The Certificate Authority (CA) provides you with your SSL Certificate (public key file). You use your server to generate the associated private key file where the CSR was created.

You need both the public key and private keys for an SSL certificate to work properly on any system. Windows uses the pfx/p12 file to contain these two keys; therefore, if you need to transfer your SSL certificate from one server to another or store it someplace for safe keeping you need to create a .pfx backup.

To backup, export, and move a SSL certificate from Windows IIS 7 systems  to IIS 7  system with its private key perform the following steps.

Step 1:  Create an MMC Snap-in for Managing Certificates on the IIS 7 system:

  1. Start > run > MMC. 

    mmc 

  2. Go into the Console Tab > File > Add/Remove Snap-in. 

    mmc 

  3. Click on Add > Click on Certificates and click on Add. 

    mmc 

  4. Choose Computer Account > Next. 

    mmc export 

  5. Choose Local Computer > Finish. 

    mmc export 

  6. Close the Add Standalone Snap-in window.
  7. Click on OK at the Add/Remove Snap-in window.

Step 2: Export/Backup certificate to .pfx file:

  1. In MMC Double click on Certificates (Local Computer) in the center window.
  2. Double click on the Personal folder, and then on Certificates.
  3. Right Click on the Certificate you would like to backup and choose > ALL TASKS > Export
  4. Follow the Certificate Export Wizard to backup your certificate to a .pfx file. 

    mmc export 

  5. Choose to ‘Yes, export the private key 

    mmc export 

  6. Choose to “Include all certificates in certificate path if possible.” (do NOT select the delete Private Key option) 

    mmc export 

  7. Enter a password you will remember.
  8. Choose to save file on a set location.
  9. Click Finish. 

    mmc export 

  10. You will receive a message > “The export was successful.” > Click OK.
  11. The .pfx file backup is now saved in the location you selected and is ready to be moved or stored for your safe keeping.

Step 3: Creating a MMC certificate snap-in on the IIS 7 system:

  1. Start > run > MMC. 

    mmc 

  2. Go into the Console Tab > File > Add/Remove Snap-in. 

    mmc 

  3. Click on Add > Click on Certificates and click on Add. 

    mmc 

  4. Choose Computer Account > Next. 

    mmc export

  5. Choose Local Computer > Finish. 

    mmc export 

  6. Close the Add Standalone Snap-in window.
  7. Click on OK at the Add/Remove Snap-in window.

Step 4: Importing your backup .pfx file to IIS 7:

  1. Open the Microsoft Management Console (MMC).
  2. On the left pane, click Certificates.
  3. On the right pane, double-click Personal.
  4. On the right pane, right-click Certificates and select All Tasks > Import (this opens the Certificate Import Wizard). Click Next.
  5. Browse to the PKCS#12 (.pfx) file that you want to import and click Next.
  6. Enter the password used to secure the certificate for export and then click OK.
  7. To export the certificate again from this computer, select Mark the key as exportable.
  8. Select the option Automatically select the certificate store based on the type of certificate. (This ensures all the certificates in the certification path (Root, Intermediate, and Server) are stored in the proper place. Problems may occur if a certificate is placed in the wrong store.)
  9. Click Next.
  10. Click Finish. A message confirms successful import.
  11. Click OK.
  12. You should now see your certificate under the Personal Certificates store in MMC.

Step 5: Binding your SSL certificate in IIS 7 to its website:

  1. Click Start > Administrative Tools > Internet Information Services (IIS) Manager.
  2. Browse to your server name > Sites > Your SSL-based site.
  3. In the Actions pane, click Bindings… 

    IIS 7 binding

  4. In the Site Bindings window, If there is no existing https binding, choose Add and change Type from HTTP to HTTPS.
    Note: If there is already a https binding, select it and click Edit. 

    IIS 7 binding 

  5. From the SSL Certificate drop down, Specify a  Friendly Name for the SSL certificate that will be used for this site. 

    IIS 7 binding 

  6. Click OK.

Your SSL certificate is now installed and the website is now configured.

If you are unable to use these instructions for your server, Acmetek recommends that you contact either the vendor of your software or the organization that supports it.

Microsoft Support

For more information refer to Microsoft.

 

Recent Posts

S/MIME for Outlook O365 Windows

Add to Favorites S/MIME Advantages of S/MIME Certificates S/MIME (Secure/Multipurpose Internet Mail Extensions) certificates offer several advantages when it comes to securing email communications. Here

Read More »

Abbreviations

Add to Favorites There are literally thousands of IT abbreviations out there. Many are concerned with the technical aspects of the computer, while others deal

Read More »

SSL Installation on Qmail

Add to Favorites SSL Installation on Qmail Qmail is a secure, reliable, efficient, simple message transfer agent. It is designed for typical Internet-connected UNIX hosts.

Read More »