Back up your SSL certificate: IIS
We recommend that you back up your SSL certificate and its corresponding private key so that you’re safeguarding against any disasters disrupting your server. These instructions will also help you export your certificate from one web server and import the certificate and its private key to another web server:
Start by clicking your Start Menu in the bottom-left corner of your screen and open the Run function.
Enter mmc into the prompt and then click OK.
This will open the Console Root. From here, click File and then select Add/Remove Snap-in from the drop-down menu that appears.
A pop-up window will now appear where you can add or remove snap-ins. Simply select Certificates from the Available snap-ins menu and then click Add.
After you’ve done this, select Computer Management from the Available snap-ins menu and then click Add.
A pop-up window will now appear where you’ll need to select the computer you want this snap-in to manage. Simply select Local computer and then click Finish.
Click OK to close the Add/Remove Snap-in window.
In the left-hand menu, expand Certificates by clicking the arrow alongside it.
This will give you a list of folders. Open the Personal folder and then click Certificates.
Find the certificate for the correct domain and then right-click it.
Hover your cursor over All Tasks and then click Export.
This will start up the Certificate Export Wizard. Simply click Next to continue.
On the next page, select the option Personal Information Exchange and make sure you perform the following:
- Select the option Include all certificates in the certification path if possible
- Select the option Export all extended properties
- Deselect Enable certificate privacy
Complete the Export wizard and you will receive a message stating that you have successfully exported your certificate. Be sure to save your .pfx file in a secure location.
If you need to import your .pfx into another IIS web server, simply follow the instructions below.
Import to MMC:
Start by clicking your Start Menu in the bottom-left corner of your screen and open the Run function.
Enter mmc into the prompt and then click OK.
This will open the Console Root. From here, click File and then select Add/Remove Snap-in from the drop-down menu that appears.
A pop-up window will now appear where you can add or remove snap-ins. Simply select Certificates from the Available snap-ins menu and then click Add.
After you’ve done this, select Computer Management from the Available snap-ins menu and then click Add.
A pop-up window will now appear where you’ll need to select the computer you want this snap-in to manage. Simply select Local computer and then click Finish.
Click OK to close the Add/Remove Snap-in window.
In the left-hand menu, expand Certificates by clicking the arrow alongside it.
This will give you a list of folders. Right-click the Personal folder, hover your cursor over All Tasks and then select Import.
This will start up the Certificate Import Wizard. Simply click Next to continue.
From here, find the .pfx file you saved previously and then import your certificate and its associated private key.
Assign to IIS:
Once you have opened IIS, find the domain your SSL certificate has been set up for.
Right-click your domain and select Properties.
From there, select the Directory security tab, followed by Server certificates.
This will open the Certificates Wizard. Simply click Next to continue.
On the next page, select Assign certificate and then click Next.
Find and select the certificate you have just imported and click OK.
Your SSL Certificate and Private Key have been imported into IIS.