Banner of question marks

How to Import the SSL Certificate w/Private Key .pfx File Using IIS 10

 

1. On the Windows server 2016 where you want to install the SSL certificate, open the Console.
In the Windows start menu, type "mmc" and open it.

 

Windows 2016 Start Menu

 

2. In the Console window, in the top menu, click "File >" and then, "Add/Remove Snap-in".

 

Under File Select Add/Remove Snap-in...

 

3. In the Add or Remove Snap-ins window, in the Available snap-ins pane (left side), select "Certificates" and then click "Add >".

 

Add Certificate in Add Or Remove Snap-Ins Window

 

4. In the Certificate snap-in window, select "Computer account" and then click "Next".

 

Certificates Snap In Menu, Selecting Computer Account

 

5. In the Select Computer window, select "Local computer: (the computer this console is running on)", and then click "Finish".

 

Select Computer Window Clicking the Local Computer radio button

 

6. In the Add or Remove Snap-ins window, click "OK".

 

Add Or Remove Snap Ins Window - Click OK

 

7. In the Console window, in the Console Root pane (left side), expand Certificates (Local Computer), right-click on the "Web Hosting" folder, and then click "All Tasks >", and then "Import".

 

IIS 10 Console Window selecting web hosting > all tasks > Import

 

8. In the Certificate Import Wizard, on the Welcome to the Certificate Import Wizard page, click "Next".
On the File to Import page, browse to and select the file that you want import and then, click "Next".

9. Notes: In the File Explorer window, in the file type drop-down, make sure to select "All Files (*.*)". By default, it is set to search for X.509 Certificate (*.cert;*.crt) file types only.

 

Browse button highlighted and the next button is highlighted in the certificate import wizard

10. On the Private key protection page, do the following:

Password: Type the password that you created when the SSL certificate was exported

Mark this key as exportable: Check this box so that you can back up or export the SSL Certificate when needed. Note that a certificate without it's private key does not work

Include all extended properties: Check this box

Certificate Import wizard. Password and bottom two import options are highlighted

 

11. On the Certificate Store page, do the following and then click "Next":

a. Select Place all certificates in the following store and click "Browse".
b. In the Select Certificate Store window, select Web Hosting and click "OK".

 

Certificate Wizard. Place all certificates in the following store highlighted, browse highlighted, next, highlighted select certificate store window: Web hosting and ok highlighted

 

12. On the Completing the Certificate Import Wizard page, verify that the settings are correct and then, click "Finish".

13. You should receive "The import was successful" message. The SSL certificate w/private key .pfx file is now saved to the Web Hosting store (folder).