We will be posting many tips on managing your database as well as tips on managing your web hosting environment. This tip is on moving SSL certificates in IIS. Here you go — free on us — compliments of http://www.sozohosting.com/ and also compliments of http://www.biznesstechnologies.com/ :
How do I move my SSL certificate from Windows IIS 6 to IIS 7?
You must first export the certificate and private key from IIS 6 into a .pfx file. This file will contain everything you need to move the certificate over to an IIS 7 server.
To export the certificate and private key from IIS 6:
1 – Start > Run and type “MMC” and hit enter
2 – Click File, Add/Remove Snap-in
3 – Click Add
4 – Select “Certificates” and click Add
5 – A wizard will open. Select computer account and click next
6 – Select Local Computer and click finish
7 – Click close
8 – Click Okay
9 – Expand Certificates on the left hand side of the console window
10 – Locate the personal certificate folder, right click on it and select import under all tasks
11 – Locate the certificate you need to export in the personal folder. Right click on it and select export under all tasks.
12 – In the export wizard, select the option to export the private key
13 – Select the file format to be PKCS#12 and check off “Include all certificates in the certification path if possible”
14 – Provide a password for the file and complete the wizard
You can now take the exported .pfx file and move it to the IIS 7 server.
To install the certificate in IIS 7, please follow these instructions:
1 – Start > Run and type “MMC” and hit enter
2 – Click File, Add/Remove Snap-in
3 – Click Add
4 – Select “Certificates” and click Add
5 – A wizard will open. Select computer account and click next
6 – Select Local Computer and click finish
7 – Click close
8 – Click Okay
9 – Expand Certificates on the left hand side of the console window
10 – Locate the personal certificate folder, right click on it and select import under all tasks
11 – Point the wizard to the .pfx file and complete
12 – Open up IIS 7 and click on the site in the left hand connections menu
13 – Under actions, select bindings
14 – Click the Add button to add a new binding
15 – The type will be https, IP address ”All unassigned” and port set to 443
16 – From the SSL certificate drop down, select the cert your just imported through the MMC and click OK
17 – Stop and Start the server.
No Comments