Importing pem files RRS feed

  • Question

  • User-509386803 posted

    I have a cert.pem chain.pem fullchain.pem and privkey.pem. How to I import the certificate into my IIS?

    Tuesday, December 17, 2019 10:44 PM

All replies

  • User690216013 posted

    Learn tools like OpenSSL and then combine the private key/certificate to a single PFX file. That's the format IIS/Windows prefers.

    Tuesday, December 17, 2019 11:13 PM
  • User-848649084 posted


    If you want to use the .pem certificate with IIS site bindings first you need to convert them in .pfx format.

    You can use some online tools or by using open SSL you can convert it.

    PEM (.pem, .crt, .cer) to PFX:

    openssl pkcs12 -export -out certificate.pfx -inkey privatekey.key -in certificate.crt -certfile more.crt

    Then import the certificate with .pfx format to your Windows server.

    Import PFX using MMC:

    1)Add Certificates (Local Computer) snap-in to MMC following the steps described above.

    2)Once added, right-click on the Personal store >> All Tasks >> Import.

    3)The Certificate Import Wizard will be launched, press Next.

    4)Using the Browse button choose the .pfx file which you want to import on your server, press Next.

    5)Enter the PFX file password. It was specified during the creation of the .pfx file. You may select Mark this key as exportable to have an opportunity to export the certificate with the private key from this server later. Then click Next.

    6)In the next dialogue window choose Automatically select the certificate store based on the type of certificate. This will allow MMC to place the certificates from the .pfx file to the corresponding folders if the file also contains intermediate certificates. Click Next.

    7)Click Finish. The certificate has been imported to the server and can be now assigned to the website.

    Import PFX using IIS Manager:

    1)Launch Internet Information Services Manager (Start > Administrative Tools >> Internet Information Services (IIS) Manager), and choose the server the certificate should be imported on.

    2)Double-click Server Certificates in the center menu.

    3)Click the Import button in the right-side menu:

    4)Locate the PFX file on your machine and specify the password that was used when exporting the certificate. Optionally, you may check Allow this certificate to be exported. Then, click OK:

    Once the certificate was imported by any of the methods described above, it will be shown in the list of server certificates in IIS Manager and can be assigned to the existing website using IIS.



    Wednesday, December 18, 2019 5:30 AM