Importing pem filesRSS

2 replies

Last post Dec 18, 2019 05:30 AM by Jalpa Panchal

‹ Previous Thread|Next Thread ›
  • Importing pem files

    Dec 17, 2019 10:44 PM|klhaviland|LINK

    I have a cert.pem chain.pem fullchain.pem and privkey.pem. How to I import the certificate into my IIS?

  • Re: Importing pem files

    Dec 17, 2019 11:13 PM|lextm|LINK

    Learn tools like OpenSSL and then combine the private key/certificate to a single PFX file. That's the format IIS/Windows prefers.

    Lex Li
    IIS Consulting Services at https://support.lextudio.com/services/consulting.html
    ---------------------------
    This posting is provided "AS IS" with no warranties, and confers no rights.
  • Re: Importing pem files

    Dec 18, 2019 05:30 AM|Jalpa Panchal|LINK

    Hi,

    If you want to use the .pem certificate with IIS site bindings first you need to convert them in .pfx format.

    You can use some online tools or by using open SSL you can convert it.

    PEM (.pem, .crt, .cer) to PFX:

    openssl pkcs12 -export -out certificate.pfx -inkey privatekey.key -in certificate.crt -certfile more.crt
    

    Then import the certificate with .pfx format to your Windows server.

    Import PFX using MMC:

    1)Add Certificates (Local Computer) snap-in to MMC following the steps described above.


    2)Once added, right-click on the Personal store >> All Tasks >> Import.


    3)The Certificate Import Wizard will be launched, press Next.


    4)Using the Browse button choose the .pfx file which you want to import on your server, press Next.


    5)Enter the PFX file password. It was specified during the creation of the .pfx file. You may select Mark this key as exportable to have an opportunity to export the certificate with the private key from this server later. Then click Next.


    6)In the next dialogue window choose Automatically select the certificate store based on the type of certificate. This will allow MMC to place the certificates from the .pfx file to the corresponding folders if the file also contains intermediate certificates. Click Next.


    7)Click Finish. The certificate has been imported to the server and can be now assigned to the website.

    Import PFX using IIS Manager:

    1)Launch Internet Information Services Manager (Start > Administrative Tools >> Internet Information Services (IIS) Manager), and choose the server the certificate should be imported on.


    2)Double-click Server Certificates in the center menu.


    3)Click the Import button in the right-side menu:


    4)Locate the PFX file on your machine and specify the password that was used when exporting the certificate. Optionally, you may check Allow this certificate to be exported. Then, click OK:

    Once the certificate was imported by any of the methods described above, it will be shown in the list of server certificates in IIS Manager and can be assigned to the existing website using IIS.

    Regards,

    Jalpa

    MSDN Community Support
    Please remember to click "Mark as Answer" the responses that resolved your issue.
    If you have any compliments or complaints to MSDN Support, feel free to contact MSDNFSF@microsoft.com.
‹ Previous Thread|Next Thread ›