System Configuration - SSL and SSH - SSL - Server Certs - Import and Export

Import an SSL certificate

Method 1 - Using the IIS Manager

Click Start -> Programs -> Administrative Tools -> Internet Information Services Manager (IIS Manager). Select the web site you wish to work with and Right-Click then select Properties. Click on the Directory Security tab then click Server Certificate.... This will start the Web Server Certificate Wizard.

Select import a certificate from a .pfx file. PFX is a common format used to store both the public and private keys of an SSL Certificate.

ssl55.png (10716 bytes)

Browse to the file and select Mark this key as exportable then click Next.

ssl56.png (11181 bytes)

Type the password and click Next.

ssl57.png (8131 bytes)

Select port (almost always 443) to use click Next.

ssl58.png (7389 bytes)

Verify the certificate summary and click Next.

ssl59.png (10628 bytes)

The certificate is now imported into IIS, click Finish.

ssl60.png (14561 bytes)

The certificate now needs to be assigned to the MOVEit DMZ FTP Server.

Method 2 - Using the MMC Snap-in

Click Start -> Run and type mmc.

ssl1.png (12111 bytes)

Click File then pick Add/Remove Snap-ins and select Certificates and click Add.

ssl2.png (26732 bytes)

Select the Computer Account and click Next.

ssl3.png (7270 bytes)

Select Local Computer and click Finish.

ssl4.png (9378 bytes)

Now you have the Certificates Snap-in added. Select the Personal store and expand so you see Certificates. Right-Click on Certificates and select All Tasks and then pick Import. This will start the Import Wizard.

ssl5.png (19754 bytes)

The Certificate Import Wizard, click Next.

ssl6.png (15482 bytes)

Select the certificate you would like to import and click Next.

ssl7.png (10281 bytes)

If the certificate was exported with a password type the password and select Mark this key as exportable and click Next.

ssl9.png (10445 bytes)

Place all certificates in the Personal store and click Next.

ssl10.png (9352 bytes)

Verify the certificate import settings and click Finish.

ssl11.png (14119 bytes)

If the import is successful a message similar to the one below should be displayed.

ssl12.png (3295 bytes)

The certificate is now installed into the system and can be assigned to the DMZ Components.


Export an SSL certificate

Click Start -> Programs -> Administrative Tools -> Internet Information Services Manager (IIS Manager). Select the web site you wish to work with and Right-Click then select Properties. Click on the Directory Security tab then click View Certificate....

Click the details tab and select Copy to File...

ssl43.png (11247 bytes)

The Certificate Export Manager should be started, click Next.

ssl44.png (15477 bytes)

Click Yes to Export the private key.

ssl45.png (9508 bytes)

Select the .PFX format and check Strong Encryption then click Next.

ssl46.png (13370 bytes)

Type in a password to secure the private key.

ssl47.png (7370 bytes)

Specify a filename to save the certificate.

ssl48.png (7053 bytes)

Verify the certificate export settings and click Finish.

ssl49.png (14318 bytes)

If the export is successful a message similar to the one below should be displayed.

ssl50.png (1838 bytes)

The certificate is now ready to be used or installed on another system.


Removing an SSL certificate from an IIS web site

This assumes you already have an SSL certificate installed. Click Start -> Programs -> Administrative Tools -> Internet Information Services Manager (IIS Manager). Select the web site you wish to work with and Right-Click then select Properties. Click on the Directory Security tab then click Server Certificate.... This will start the Web Server Certificate Wizard, click Next.

Select Remove the current certificate and click Next.

ssl52.png (11085 bytes)

Verify the certificate that is about to be removed and click Next.

ssl53.png (10371 bytes)

The certificate has been removed click Finish.

ssl54.png (15064 bytes)