SSL - Server Certs - Import and Export

This topic covers the following tasks:

• Import an SSL certificate

  Method 1 - Using the IIS Manager

  Method 2 - Using the MMC Snap-in

• Export an SSL certificate
• Removing an SSL certificate from an IIS web site

Import an SSL certificate - Method 1 - Using the IIS Manager

1. Click Start > All Programs > Administrative Tools > Internet Information Services (IIS) Manager.
2. Select the MOVEit DMZ server, then select Server Certificates.

   

3. Click Import on the right.

   

   Browse to the file.

   Note: PFX is a common format used to store both the public and private keys of an SSL Certificate.

   Type the password.

   Select Allow this certificate to be exported.

   Click OK.

4. Select port (typically 443) to use and click Next.
5. Verify the certificate summary and click Next.

   

   The certificate is now imported into IIS, click Finish.

   

   The certificate now needs to be assigned to the MOVEit DMZ FTP Server.

Import an SSL Certificate - Method 2 - Using the MMC Snap-in

1. Click Start > Run and type mmc to open the Microsoft Management Console (MMC).

   

2. Click File then pick Add/Remove Snap-in.
3. Select Certificates on the left and click Add.
4. Select the Computer Account and click Next.

   

5. Select Local Computer and click Finish.

   

   Now you have the Certificates Snap-in added.

6. Select the Personal store and expand so you see Certificates. Right-Click on Certificates and select All Tasks > Import. This will start the Import Wizard.
7. Click Next.
8. Browse to select the certificate you would like to import and click Next.
9. If the certificate was exported with a password, type the password and select Mark this key as exportable and click Next.
10. Place all certificates in the Personal store and click Next.

    

11. Verify the certificate import settings and click Finish.

    

    If the import is successful a message similar to the one below should be displayed.

    

    The certificate is now installed into the system and can be assigned to the DMZ Components.

Export an SSL certificate

1. Click Start > All Programs > Administrative Tools > Internet Information Services (IIS) Manager.
2. Select the MOVEit DMZ server, then select Server Certificates.

   

3. On the right, select View...

   

4. Click the Details tab and select Copy to File...

   

   The Certificate Export Manager starts.

   

   Click Next.

5. Click Yes to Export the private key.

   

6. Select the .PFX format and check Strong Encryption then click Next.

   

7. Type in a password to secure the private key.

   

8. Specify a filename to save the certificate.

   

9. Verify the certificate export settings and click Finish.

   

   If the export is successful a message similar to the one below should be displayed.

   

   The certificate is now ready to be used or installed on another system.

Removing an SSL certificate from an IIS web site

This assumes you already have an SSL certificate installed.

1. Click Start > All Programs > Administrative Tools > Internet Information Services (IIS) Manager.
2. Select the MOVEit DMZ server, then select Server Certificates.

   

3. Select the server certificate you want to remove, then click Remove on the right.
4. Click Yes to confirm.

   The certificate has been removed. Click Finish.