ASK SSL Support Desk – Why Can I not Create a PFX From a Citrix Netscaler?

What is Ask SSL Support Desk? It is a summary of random questions that have one to the attention of Acmetek’s most awesome technical support reps. Answered and shared for the SSL Support Desk’s SSL Library which is designed to teach and educate the community. Question: I’m trying to create a pfx file for wildcard cert *.example.com in Citrix Netscaler but I am Failing to do so. Ive crosses checked with the following directions. What am I doing wrong? https://www.digicert.com/csr-creation-ssl-installation-citrix-netscaler.htm#netscaler_vpx_create_csr Short Answer: That is because Citrix Netscaler cannot create pfx files. Netscaler cannot Create pfx format files. It creates pem apache format. Netscaler systems do on the other hand have the ability to import a pfx file, but that pfx […]

Read More

How To Move An SSL Certificate From Windows To Sonicwall NSA

Windows servers use .pfx/.p12 files to contain the public key file (SSL Certificate) and its unique private key file. You need both the public key and private keys for an SSL certificate to work properly on any system. If you need to transfer your SSL certificate from one server to another or store it someplace for safe keeping you need to create a .pfx backup.  Dell Sonicwall systems have the capability to import a pfx file generated from windows. To backup, export, and move an SSL certificate from a Windows Server to SonicWALL with its private key perform the following steps. Step 1:  Create an MMC Snap-in for Managing Certificates on the IIS 8 system: Start > run > MMC. Go […]

Read More

Digicert Certificate Utility – SSL Export Instructions. (pfx or pem format)

Depending on the circumstance you may need to export your SSL Certificate to wherever else it is needed. The Digicert Certificate Utility allows you to export an SSL Certificate with its private key that has been generated from it from the following formats pfx or pem. This comes in handly with large typologies where not all server systems, firewalls, applications, etc.. handle Certificate keypair encryption the same way. So in a situation where you need to have you SSL Certificate Installed on both a Windows or an Apache system you can export the certificate off the Utility in either compatible format. Below are instructions on how to export your SSL Certificate Installed in the Digicert Certificate Utility in either pfx […]

Read More

Digicert Certificate Utility – Code Signing (Exporting pfx)

The Digicert Certificate Utility is probably one of the best certificate management tool out on the net. A lot of people become scared with key-pair encryption but key-pairs/certificates are actually fundamental easy to figure out. Unlike SSL certificates, code signing certificates perform the function of signing. Code signing certificates creates a tamper proof digital shrink wrap of your application software files and denotes to those who download or install the application who created/published it. Although Some Certificate Authorities my separate their Code Signing Products and have different ways to Enroll and Install. The Digicert Certificate Utility is cross platform meaning your can signing the following files with the same certificate. .exe, .cab, .dll, .ocx, .msi, .xpi, .xap, windows kernel-mode. Java. […]

Read More

How To Import Email (S/MIME) Certificate – Mozilla Thunderbird?

Before following these instructions, please make sure that you have a copy of your Client (S/MIME) Email Certificate in a PFX/P12 (PKCS#12) format. Typically this file will have a .p12 or .pfx extension consisting of both your public and private keys. When exporting your Client/Email Certificate from wherever it resides there may be a option to export the private key. This option will give you your pfx file. Some applications by default will automatically include the private key  thus giving you a pfx file. Note: These instructions are based on a Windows Operating System. Locations of the options presented below may vary in other operating systems. Step 1: Importing your Email Certificate into Thunderbird: Open Thunderbird. Click on the menu […]

Read More

How To Move SSL Ceritifcate From Windows To Mitel MiCollab MSL Server

Like the majority of server systems you will install your SSL certificate on the same server where your Certificate Signing Request (CSR) was created. Your private key will always be left on the server system where the CSR was originally created. Your SSL certificate will not work without this private key file. We will assume that this is the original system. MiCollab systems have the capability of importing a pfx/p12 file which is a keypair file that Microsoft Systems like IIS/Exchange uses that contains both the SSL Certificate and it’s Private key. To export your installed SSL Certificate with its private key from a Windows System to Mitel MiCollab MSL Server perform the following. Step 1:  Create an MMC Snap-in for […]

Read More

How to Export a Certificate From Internet Information Services (IIS) Manager.

Depending on the situation you may have to install your SSL Certificate on multiple systems. Since no SSL Certificate will work without it’s private key this scenario is based on the CSR being generated from an IIS system and the SSL Certificate has already been installed back into the system.. This will give you a PFX file that you can then perform a binding with to a website on the system or more importantly Export as a PFX/p12 file used to be imported into other server systems with pfx capability. Note: This method of of exporting the SSL Certificate with its private key off an IIS system will not append any Intermediate Chain certificates that go along with the SSL Certificate […]

Read More

How To Export an SSL Certificate With Private Key (pfx) Using MMC On Windows

Windows servers use .pfx/.p12 files to contain the public key file (SSL Certificate) and its unique private key file.  The Certificate Authority (CA) provides you with your SSL Certificate (public key file). You use your server to generate the associated private key file where the CSR was created. You need both the public key and private keys for an SSL certificate to work properly on any system. Windows uses the pkcs#12 (pfx/p12) file to contain these two keys and another of intermediate certificates along the chain of trust; therefore, if you need to transfer your SSL certificate from one Windows system to another that uses PFX files or store it someplace for safe keeping you need to create a pkcs#12 (pfx/p12) backup. […]

Read More

How To Import A Certificate Into Mac OS

Depending on the circumstance you may need to import an SSL or Code Signing Certificate into a Mac system. Typically all Mac OS systems refer to the Mac’s Keychain Access for all things pertaining to digital certificates, unless by a different design on whatever application the you are using. Mac Systems use pfx/p12 files that contain both the public & private key to perform its signing, encryption, etc.. similar to Microsoft.  Therefore, if you need to import a functional SSL or Code Signing certificate into Mac you will need a .pfx/.p12 To import your SSL or Code Signing Certificate into you Mac system perform the following. Importing your  PKCS#12 .pfx/.P12 file on Mac OS X To open Keychain Access, start by clicking on […]

Read More

How to Convert an SSL Server Certificate from Apache to PKCS12/PFX

Depending on your network you may have to move your SSL/TLS server certificate and its private key from one system to another. This article covers how to move your SSL certificate, its private key, and its intermediate CA from Apache to pfx also known as a pkcs#12 file. This will require a conversion using OpenSSL that is on the Apache System. Apache systems are very customizable. The directory location and naming of the individual files needed vary depending on your personalized system. Below are generalized instructions. We will start by assuming that you have already successfully installed the SSL certificate on the Apache web server. To move your certificate keypair from Apache to PFX perform the following: Step 1: Finding your […]

Read More