How to Export SSL certificate using MMC?

How to Export SSL certificate using MMC?


When an SSL certificate is already installed on a Windows server, you may want to reinstall it on SupportCenter Plus server. This may be required when you have a Wildcard or a Multi-domain certificate, and the subdomains or different domains are hosted on different machines.
In this case, the certificate can be moved from one server to another in a PFX file. PFX is a common certificate format for Windows servers. The file in this format contains the certificate associated with its private key and, if applicable, intermediate certificates that sign the domain end-entity certificate. As a rule, it has a *.pfx or *.p12 extension. Basically, creating a PFX file is the only way to export a private key from a Microsoft Windows server on which the CSR code was generated.
Follow these steps to perform the certificate export:


Creating a .pfx file

Launch Microsoft Management Console. Press Win+R, type in mmc and press OK.


Click File and select the Add/Remove Snap-in option.


Click on Certificates in the list of Available snap-ins and then, on the Add button.


Select Computer account and click Next.


Choose Local Computer and click on the Finish button.


Click OK to add the certificate snap-in and get back to console.


Expand the Personal store in the left-side menu, and choose Certificates. Right-click on the certificate you want to export > All Tasks > Export.


This will run the Certificate Export Wizard.


Select ‘Yes, export the private key’.


If the radio button ‘Yes, export the private key’ is grayed out, it means that either the private key was not marked as exportable during the certificate request generation, or that you do not have the corresponding private key on the machine you are using.

Note: if you used IIS Manager certificate request wizard to generate the CSR code, the private key will be marked as exportable by default.

In this case, you will not be able to create a PFX file, only export the certificate without the private key. To have the opportunity to export the certificate to another machine, you will need to create a new CSR code marking the private key as exportable and perform a certificate reissue. Otherwise, you can generate a new CSR code for the same common name on the new machine and import the certificate to it after the reissue is completed.

With a COMODO certificate you can perform a reissue an unlimited amount of times for each server. 

If you can export the private key, proceed to the next stage. The window Export File Format will have the format Personal Information Exchange - PKCS #12 (.PFX) selected. Please check Include all certificates in the certification path if possible to have the certificate exported with the chain of intermediate CA certificates into a .pfx file. Then click Next.

Note: do not choose ‘Delete the private key if the export is successful’.


Type and confirm password on the next window and click Next. Make sure you remember the password; it will be used later during the import of a .pfx file to a new server.




Note: The password should not contain the symbol '&'



In the File to Export window select the name and location of the .pfx file to which the certificate and private key will be exported.


Click Finish to complete the export wizard. The certificate has been successfully imported.


Click here for instructions to Install the .PFX type certificate in SupportCenter Plus.
        New to M365 Manager Plus?
        New to M365 Manager Plus?
          New to RecoveryManager Plus?
          New to RecoveryManager Plus?
            New to Exchange Reporter Plus?
            New to Exchange Reporter Plus?
              New to SharePoint Manager Plus?
              New to SharePoint Manager Plus?
                  See all integrations
                  New to ADManager Plus?

                    New to ADSelfService Plus?

                    Start your free trial

                      • Related Articles

                      • SSL Installation - .pfx file type

                        Instructions to setup SSL with a pfx file type, 1. Copy the .pfx file to the location C:\\ManageEngine\\SupportCenter\\server\\default\\conf 2. Change the Webserver port to 443 by executing changewebserverport.bat 443 https 3. Goto ...

                      • Exporting and importing requests in SCP using xls format

                        Step 1 : Generate a report as xls file * Go to Reports module and choose New Custom report, select Requests module and proceed to the report wizard. * Select the required fields (columns) and run the report. You might choose the Request ID as well, ...

                      • How to configure SAML with Azure AD

                        This guide will help us configure SAML for users who want to use Azure AD as their IdP and also give you insights on a few issues that you might run into while configuring SAML in an Azure Environment. In an ideal environment, customers will have an ...

                      • Update status using Python script in 11.0

                        Using a Python script via custom trigger, we can update the status invoking an API call. A short guide on setting up python is available here : https://pitstop.manageengine.com/portal/kb/articles/how-to-setup-python-on-the-server Find the attached ...

                      • How to take a connection dump for analyzing performance issues?

                        For Performance/slowness issues instead of taking Threaddump manually or instead of invoking PerformanceTool make use of the below URL when the issue occurs, http://servername:portnumber/servlet/PerformanceDebug Note: The above URL works even when ...

                        Related Products