Entrust Datacard

Entrust Certificate Services Support Knowledge Base

Last Modified: 2016-09-07 15:42:07.0

What are the steps for backing up and importing a certificate on Microsoft IIS 6?

Article Number: 46242

Question:

What are the steps for backing up and importing a certificate on Microsoft IIS 6?

NOTE: These instructions apply to the following server types:

Microsoft IIS 5
Microsoft IIS 6
Microsoft Exchange 2007 (Windows Server 2003)
Microsoft Office Communications Server 2007
Microsoft Internet Security (ISA) Server 2006


 

Answer:

Part 1 - Backing up a certificate

The certificate and private key can be backed up by exporting the certificate to a PFX file, as described in the steps below:

  1. Click Start, and then click Run.
     
  2. Type in mmc and click OK.
     
  3. From the File menu, choose Add/Remove Snap-in.
     
  4. In the new window that appears, click Add.
     
  5. Select Certificates and then click Add.


     
  6. Choose the Computer account option and click Next.


     
  7. Select Local Computer and then click Finish.


     
  8. Click Close, and then click OK. You should see the snap-in for Certificates (Local Computer) in the console.


     
  9. Expand the Certificates (Local Computer) tree in the left preview panel.


     
  10. Expand the Personal folder in the left preview panel and click on the Certificates folder.


     
  11. Right-click on the certificate you wish to backup. Select All Tasks > Export.


     
  12. The Certificate Import Wizard appears. Click Next.
     
  13. Select Yes, export the private key and click Next.


     
  14. Select Personal Information Exchange as the format you want to use. Check the box to Include all certificates in the certification path. Do not check the box to Delete the private key. Click Next.


     
  15. Enter a password for the private key and confirm. Remember this password as you will need it to import the certificate. Click Next.


     
  16. Supply a file name to save your PFX file and click Next.


     
  17. Click Finish to complete the Certificate Export Wizard.


     
  18. You should see a dialog box indicating the export was successful. Click OK.


     

 


Part 2 - Importing a certificate

A certificate and private key saved in PKCS #12 (.PFX) format can be imported to a Microsoft web server by following the steps below:
 

  1. Click Start, and then click Run.
     
  2. Type in mmc and click OK.
     
  3. From the File menu, choose Add/Remove Snap-in.
     
  4. In the new window that appears, click Add.
     
  5. Select Certificates and then click Add.

 

  1. Choose the Computer account option and click Next.

 

  1. Select Local Computer and then click Finish.

 

  1. Click Close, and then click OK. You should see the snap-in for Certificates (Local Computer) in the console.

 

  1. Expand the Certificates (Local Computer) tree in the left preview panel.

 

  1. Expand the Personal folder in the left preview panel and click on the Certificates folder.

 

  1. Right-click the Personal folder and select All Tasks > Import.

     
     
  2. The Certificate Import Wizard appears. Click Next.
     
  3. Browse to the location of your PFX file and click Next.

 

 

 

  1. Enter the password for the private key. Select Mark this key as exportable and click Next.

 

 

  1. Select Automatically select the certificate store based on the type of certificate and click Next.

 

 

 

  1. Click Finish to complete the Certificate Import Wizard.

 

 

 

  1. You should see a dialog box indicating the import was successful. Click OK.

 

 

TN6004

Affected Products:

  • Entrust Certificate Services 1 Year Advantage SSL Certificate Version Not Applicable Language Not Applicable Platform Not Applicable