Ask a Question

Solution ID : SO10438

Last Modified : 05/02/2018

Export Certificate and Private Key from a Microsoft IIS 6.0 server

Solution

Part 1: Create an MMC Snap-in for Managing Certificates

  1. From the Web server, click Start > Run
  2. In the text box, type mmc
  3. Click OK
  4. From the Microsoft Management Console (MMC) menu bar, select File > Add/Remove Snap-in
  5. Click Add
  6. From the list of snap-ins, select Certificates
  7. Click Add
  8. Select Computer account
  9. Click Next
  10. Select Local computer (the computer this console is running on)
  11. Click Finish
  12. In the snap-in list window, click Close
  13. In the Add/Remove Snap-in window, click OK
  14. Save these console settings for future use
     

Part 2: Export the Certificate with Private Key attached

  1. Open the Certificates (Local Computer) snap-in you added, and select Personal > Certificates
  2. The Subject field of the certificate lists the Common Name (CN). (Click Tools > Internet Options > Content to view the Common Name if you are not sure)
  3. Right-click on the desired certificate and select All Tasks > Export. The Certificate Export Wizard opens
  4. Select Yes, export the private key
  5. Click Next
  6. In the Export File Format window, ensure the option for Personal Information Exchange  - PKCS#12 (.pfx) is selected
  7. Select Include all certificates in the certificate path if possible and then click Next. (If you do not select the Include all certificates in the certificate path if possible option, your server may not recognize the issuer of the certificate, which may result in security warnings for your clients.
  8. De-select Require Strong Encryption. (This may cause a password prompt every time an application attempts to access the private key or it may cause IIS to fail).
  9. Click Next
  10. Enter and confirm a password to protect the PFX file and click Next
  11. Choose a file name and location for the export file (do not include an extension in your file name; the wizard automatically adds the PFX extension for you)
  12. Click Next
  13. Read the summary and verify that the information is correct. Pay special attention to where you saved the file. Ensure that the information is correct
  14. Click Finish