Export Your SSL Certificate Using the DigiCert Certificate Utility (PFX Format) (2024)
Export your SSL/TLS certificate from one Microsoft server to import on another Microsoft server
Background
Windows servers use .pfx files containing the public key (SSL certificate file) and the associated private key file. DigiCert provides your SSL certificate file (public key file). You use your server to generate the associated private key file as part of the CSR.
You need public and private keys for an SSL certificate to function. If you need to transfer your SSL certificates from one server to another, export them as a .pfx file.
Export Prerequisite
To create a .pfx file, the SSL certificate and its corresponding private key must be on the same computer/workstation. You may need to import the certificate to the computer where the associated private key is stored (e.g., the laptop/desktop computer where you created the CSR) before successfully exporting it as a .pfx file.
Export Your SSL Certificate w/Private Key Using the DigiCert Certificate Utility
These instructions explain how to export an installed SSL certificate from a Microsoft server and its corresponding private key as a .pfx file for importing to another server. If you need your SSL Certificate in Apache .key format, please seeExport a Windows SSL Certificate to an Apache Server (PEM Format).
In theCertificate Exportwizard, selectYes, export the private key,selectpfx file, and then checkInclude all certificates in the certification path if possible, and finally, selectNext.A .pfx file uses the same format as a .p12 or PKCS12 file.
If theYes, export the private keyoption is grayed out (unusable), the certificate's matching private key is not on that computer. This prevents you from creating the .pfx certificate file.
To fix this problem, import the certificate to the same machine where the certificate's CSR was created. SeeExport Prerequisite.
In thePasswordandConfirm Passwordboxes, enter and confirm your password, and then selectNext. You must use this password to import this SSL certificate onto other servers and devices that accept a .pfx file.
In theFile namebox, select … to browse for and select the location where you want to save the .pfx file, provide a file name, selectSave, and then selectFinish.
When you receive the "Your certificate and key have been successfully exported" message, selectOK.
Import PFX Certificate into Microsoft Windows Server
To import the certificate to your server using the DigiCert Certificate Utility, follow the instructions for that particular server type:
After importing your certificate onto the new server, if you run into certificate trust errors, try repairing them usingDigiCert® Certificate Utility for Windows. If this does not fix the errors, contact support.
Test Your Installation
To verify you've installed the certificate correctly, use ourDigiCert® SSL Installation Diagnostics Tool. In theServer Addressbox, enter the DNS name of the site (e.g.,example.com) that you secured with your SSL certificate.
Run the DigiCert® Certificate Utility for Windows (double-click. In the Certificate Export wizard, select Yes, export the private key, select pfx file, and then check Include all certificates in the certification path if possible, and finally, select Next. A . pfx file uses the same format as a .
The .pfx file, which is in a PKCS#12 format, contains the SSL certificate (public keys) and the corresponding private keys. Sometimes, you might have to import the certificate and private keys separately in an unencrypted plain text format to use it on another system.
If you cannot export the certificate in PFX format, it's because the private key is missing. That not normal for a Qlik Sense internal certificate. Nevertheless, you can recreate certifcate on the new server by start the Repository service with the command Repository.exe -bootstrap -standalone -restorehostname.
The contents of a pfx file can be viewed in the GUI by right-clicking the PFX file and selecting Open (instead of the default action, Install). This will open mmc and show the pfx file as a folder. Open the pfx folder and the Certificates subfolder, and you will see the certificate(s) contained in the pfx.
A . cer file usually contains only the public key certificate. In contrast, a .pfx file is an all-encompassing container housing private and public key certificates.
Right-click the certificate you want to export to .pfx file.From the drop down, click on All Tasks and then Export. You will see the Certificate Export Wizard.
Introduction: My name is Francesca Jacobs Ret, I am a innocent, super, beautiful, charming, lucky, gentle, clever person who loves writing and wants to share my knowledge and understanding with you.
We notice you're using an ad blocker
Without advertising income, we can't keep making this site awesome for you.