I'm trying to install a Microsoft Internal CA issued certificate for PAM360 Web console.

I created a CSR from Windows, obtained the .cer file, imported to local computer cert store, and exported with private key .pfx file.  then used keytool to convert the .pfx to .p12

then from pam360 console, configuration -> Pam360 server select .p12 as type and imported the .p12 certificate

but after import, console reports it as invalid certificate.

Are there more detailed instruction how generating the correct certificate for the Pam360 web console?