Exporting certificate from IIS - not able to save .pfx

Posted on 2006-04-11
Last Modified: 2008-02-01
I have all together 3 certificates on a windows 2003 server (IIS6) which I have only been able to export 2 out of the 3 successfully as a .pfx file, allowing me to import onto our new webserver.

On the old server, the 1 that I'm not able to export as a .pfx file is not giving me the options to export the private key, and it won't let me save it as a PFX file.

It only allows me to save as .CER or a P7B.

When attempting to import into IIS, there's no option to import these kinds of files - how can I get this certificate installed and available to IIS on the new machine?
Question by:jpipitone
    LVL 10

    Expert Comment

    Are you using the certificate MMC plugin to export the certificate?there you have the option to import either in P7B or PFX format
    LVL 34

    Accepted Solution

    If you cannot export the private key it is because when the certificate was first installed the private key was marked as not exportable.

    PFX is a format that can include bth a certificate and a private key, but if you can't export the private key it won't ley you use PFX since there is no benefit to storing just a certificate as a PFX rather than as a CER file.

    The way you get a CER file on a machine is to use the Certificates MMC to import the CER file, but if you don't have a private key to go with it it wil be useless as far as IIS is concerned.

    You will either need to find a different copy of the certificate that *does* have the private key or you will need to request a new certificate.

    Dave Dietz
    LVL 1

    Author Comment

    oK thanks....

    Featured Post

    What Is Threat Intelligence?

    Threat intelligence is often discussed, but rarely understood. Starting with a precise definition, along with clear business goals, is essential.

    Join & Write a Comment

    Here are the symptoms: You start receiving calls from users that one of your legacy web apps isn't coming up, so you log into your IIS 5 server to check it out.  When you pull up the services, you notice that the WWW Publishing service isn't runn…
    Lync server 2013 Backup Service Error ID 4049 – After File Share Migration
    To add imagery to an HTML email signature, you have two options available to you. You can either add a logo/image by embedding it directly into the signature or hosting it externally and linking to it. The vast majority of email clients display l…
    This video gives you a great overview about bandwidth monitoring with SNMP and WMI with our network monitoring solution PRTG Network Monitor ( If you're looking for how to monitor bandwidth using netflow or packet s…

    733 members asked questions and received personalized solutions in the past 7 days.

    Join the community of 500,000 technology professionals and ask your questions.

    Join & Ask a Question

    Need Help in Real-Time?

    Connect with top rated Experts

    17 Experts available now in Live!

    Get 1:1 Help Now