Back up your SSL certificate: IIS 7

We recommended you backup your certificate and its corresponding private key in the event that there is a hardware failure or other disaster affecting your Server, the following instructions will show you how. These instructions will also help you export your certificate from one web server and import the certificate and its private key to another web server.

STEP 1: Export the certificate and private key from the IIS 6.0 server

Create an MMC Snap-in for Managing Certificates
  • Step 1 of 5

    Open Windows MMC.

    • Click Start.
    • Run MMC.
  • Step 2 of 5

    Select File, Add/Remove Snap-in.

  • Step 3 of 5

    Select Computer Account, Local Computer.

  • Step 4 of 5

    Close the Add Standalone Snap-in window.

  • Step 5 of 5

    Click on OK at the Add/Remove Snap-in window.

Export the Certificate with Private Key
  • 1 of 12

    Expand the Certificates Console Tree.

  • 2 of 12

    Look for a folder called Personal, Certificates.

  • 3 of 12

    Select the Certificate that you wish to back up.

  • 4 of 12

    Right-click on the file and choose ALL TASKS, Export.

  • 5 of 12

    The Certificate Export Wizard will start up. Click Next.

  • 6 of 12

    Choose Yes, export the private key.

  • 7 of 12

    Select Include all certificates in the certification path and click on Next.

  • 8 of 12

    Set a password to protect the export of the Private key file with the Certificate. Click on Next.

  • 9 of 12

    Choose to save the file to a set location.

  • 10 of 12

    Type the file name in the File Name box, and click Save.

  • 11 of 12

    Click on Next, Finish.

  • 12 of 12

    You will receive a message that states The export was successful when the export has been completed. Click OK.

    The file will be given an extension of .pfx, and contains your SSL certificate and the corresponding private key.

STEP 2: Import the pfx file into the IIS 7.0 web server

  • Step 1 of 5

    Open IIS Manager and navigate to the level you want to manage.

  • Step 2 of 5

    In Features View, double-click Server Certificates.

  • Step 3 of 5

    In the Actions pane, click Import.

  • Step 4 of 5

    In the Import Certificate dialog box, do the following:

    • Type a file name in the Certificate file box or click the browse button to navigate to the name of a file where the exported certificate is stored.
    • Type a password in the Password box if the certificate was exported with a password.
    • Select Allow this certificate to be exported if you want to be able to export the certificate, or clear Allow this certificate to be exported if you do not want to allow additional exports of this certificate.
  • Step 5 of 5

    Click OK.

Export your Certificates from IIS
  • Step 1 of 5

    Open Microsoft IIS 7.0 Manager.

  • Step 2 of 5

    In the left-hand pane select the Server Name.

  • Step 3 of 5

    In the middle window click the Server Certificates icon.

  • Step 4 of 5

    Select the certificate you wish to export.

  • Step 5 of 5

    Give the certificate a file name and password.

Your certificate and private key have been exported to a .pfx file.