Ask a Question

Solution ID : SO14341

Last Modified : 05/02/2018

How do I move a certificate from Microsoft IIS 7.0 to Microsoft IIS 7.0

Solution

To install SSL certificate from Microsoft IIS 7.0 to Microsoft IIS 7.0 server, perform the following steps.
 

Step 1: Export certificate in IIS 7.0

  1. Start > Run
  2. Type in MMC and click OK
  3. Go into the File Tab > select Add/Remove Snap-in
  4. Click on Certificates and click on Add
  5. Select Computer Account > Click Next
  6. Select Local Computer > Click Finish
  7. Click OK to close the Add/Remove Snap-in window.
  8. Double click on Certificates (Local Computer) in the center window.
  9. Double click on the Personal folder, and then on Certificates.
  10. Right Click on the Certificate you would like to backup and choose > ALL TASKS > Export
  11. Follow the Certificate Export Wizard to backup your certificate to a .pfx file.
  12. Choose to 'Yes, export the private key'
  13. Choose to "Include all certificates in certificate path if possible." (do NOT select the delete Private Key option)
  14. Enter a password you will remember
  15. Choose to save file on a set location
  16. Click Finish
  17. You will receive a message > "The export was successful." > Click OK
  18. The .pfx file backup is now saved in the location you selected.
     

Step 2:  Import certificate (.pfx) file using Microsoft Management Console (MMC) Snap-in for managing certificates

  1. With the MMC and the Certificates snap-in open, double click on Certificates (Local Computer) in the center window.
  2. Right click on the Personal Certificates Store (folder)
  3. Choose > ALL TASKS > Import
  4. Follow the Certificate Import Wizard to import your .pfx file. You will need to browse for .pfx file.
  5. Enter the password that was used when exporting the certificate to a .pfx file.
  6. If desired, check the box to "Mark this key as exportable."
  7. When prompted, choose to automatically place the certificates in the certificate stores based on the type of the certificate.
  8. Click Finish to close the certificate wizard.
  9. Close the MMC console. In the case that you are prompted, it is not necessary to save the changes made to the MMC console.
     

Step 3: Binding certificate to the web site in IIS 7.0

  1. Click Start > Administrative Tools > Internet Information Services (IIS) Manager
  2. Browse to your server name > Sites > Your SSL-based site
  3. In the Actions pane, click Bindings...


     
  4. In the Site Bindings window, If there is no existing https binding, choose Add and change Type from HTTP to HTTPS.
    Note: If there is already a https binding, select it and click Edit.


     
  5. From the SSL Certificate drop down, Select the Friendly Name for the SSL certificate that will be used for this site.


     
  6. Click OK

 

Step 4:  Verify certificate installation

  1. To verify the SSL certificate installation, use the Thawte CryptoReport
  2. In some cases you may need to Stop and start your Web server prior to any testing. 
    Note: In some cases the changes may not take place after restarting IIS Services and a re-boot is needed.


Additional Notes:

If you do not specify an IP address when installing your SSL Certificate, the same ID will be used for all virtual servers created on the system.
 
If you are hosting multiple sites on a single server, you can specify that the ID only be used for a particular server IP address.
 

Microsoft Support
For more information, contact Microsoft.