How to Export PFX file using .cer in IIS | Best 2 Methods

Export PFX file
Export Private Key

How to Export PFX file using .cer and Private Key

SSL is a Secure Socket Layer used to secure your web applications and websites, there are different type of SSL certificates like Domain Based Internet SSL, Domain Based intranet SSL, Wildcard SSL, (internet Protocol) IP based SSL etc.

Certificate Can be made using different types of algorithms and 1024 or 2048 encryptions for example
Certificate Signature Algorithm : PKCS #1 SHA-256 With RSA 2048bit Encryption
Certificate Format: CER

Export PFX file

Steps to Import SSL / Export PFX and Export Private key.

Step 1. Go to IIS Internet Information Services IIS Manager, type iis in search box to open it.

Screenshot 1

Step 2. Click on your application and then Double click on Server Certificates

Screenshot 2

Import SSL Certificate (Complete Certificate Request)

To Export PFX file from certificate first you need to add SSL Certificate in IIS Manager in Server Certificates

Step 3. On right side hand Click on Complete Certificate Request to Import your SSL certificate Browse the .cer and enter any friendly name and click on OK

Screenshot 4

Step 4. Your SSL Certificate imported successfully, you will see a Certificate like below screenshot with Vendor name who has issued this certificate and other details like Issued to, Expire date, certificate name etc.

Screenshot 5

Export PFX file

Step 5. Right click on Your SSL certificate and click Export

Screenshot 6

Step 6. Enter path to export the PFX file and then Enter Password and confirm password, Note that password will require at the time of private key export

Screenshot 8

Step 5. Your PFX file will be exported in your entered location

Screenshot 9

Export Private Key

How to Export Private Key using .Pfx

Step1. Download Open SSL folder and Extract it

To download Open SSL type in Google Open SSL Sourceforge and click on Sourceforge.net

OpenSSL download | SourceForge.net

Screenshot 99

Step 2. Click on Download after download complete you will get and zip file right click on File and Extract it to same folder

Screenshot 100

Step 2. After extract go to the Bin folder of Open SSL folder and paste your .PFX file

Screenshot 101

Step3. Click on Path and type CMD to open same path in command prompt or open cmd and go to the path of open SSL up to bin folder.

Screenshot 102

Step4. Enter below command and replace your pfxfilename to your name of the PFX file

 openssl pkcs12 -in PFXFILE.pfx -nodes -nocerts -out private-key.pem 

Step5. Click Enter it will ask password enter the password that you was entered while creating PFX file

Screenshot 103

Note: password will not visible here just type password and click enter button. You will see message ‘MAC Verified’.

Step5. Your private kye file will be stored in Bin folder of your Open SSL folder with name

 private-key.pem

Screenshot 104

Another Way to Export PFX file and Private Key

Back Up Certificate – Internet Information Services (IIS) 7

Export Your Certificate Using IIS

Export Your Certificate Using the MMC

Create an MMC Snap-in for Managing Certificates

Back Up Certificate – Internet Information Services (IIS) 7

1 Open Microsoft IIS 7 Manager.

2 Select the Server Name from the left side pane.

3 Click the Server Certificates icon from the middle window.

4 Select the certificate you wish to export.

5 Give the certificate a file name and password.

6 Your certificate and private key have now been exported to a “.pfx” file. 

1 Open  MMC (Start > Run > MMC).

2 Select File > Add/Remove Snap-in > Certificate > Add > OK.

3 Close the Add Standalone Snap-in window.

4 Click OK in the Add/Remove Snap-in window.

news > Automated, Scalable PKI Management Made Easy

Export the Certificate With Private Key

Import PFX File Into IIS 7 Web Server

1 Expand the Certificates Console Tree.

2 Locate the Personal folder. Click Certificates.

3 Select the certificate you wish to back up.

4 Right-click on the file and choose All Tasks > Export.

5 The Certificate Export Wizard will start up. Click Next.

6 Select Yes, Export the Private Key.

7 Select Include All Certificates in the Certification Path. Click Next.

8 Create a password to protect the export of the private key file with the certificate. Click Next.

9 Choose to save the file to a set location.

10 Type the file name in the appropriate box. Click Save.

11 Click Next > Finish.

You will receive the message “The export was successful” when the export has been completed. Click OK. The file will have a

“.pfx” extension and will contain your certificate and corresponding private key.

12 Follow below five Steps

  • 1 Open IIS Manager and navigate to the level you want to manage.
  • 2 In Features View double-click Server Certificates.
  • 3 In the Actions pane click Import.
  • 4. In the Import Certificate dialog box type in a file name in the certificate file box or browse to navigate to the name of a file where the exported certificate is stored.
  • 5 Type in the appropriate password if the certificate was exported with a password.

Select Allow This Certificate To Be Exported if you want to be able to export the certificate in the future. If you do not want

to allow for this function, do not select the option. Click OK.

https://www.iis.net/

How to create CSR