How to Import an SSL Certificate in .PFX Format

This step by step guide will walk you through the process of Importing an SSL Certificate in .PFX format when transferred from another server.

In a previous article, 'How to Export an SSL Certificate in .PFX Format', we provided a walk-through for exporting an SSL Certificate. Now, we will go over the steps for importing that same '.PFX' file onto a site in IIS.

First, open IIS by navigating to 'Start --> Administrative Tools --> Internet Information Services (IIS) Manager'.

Once in IIS, click the plus sign next to the server name, and then click on 'Web Sites' to populate the list of hosted sites. Right-click the site you wish to import the certificate for and choose 'Properties'.

Once inside the Properties windows, click on the 'Directory Security' tab, then Click the 'Server Certificate' button. Note that the 'View Certificate' button is greyed out, indicating that this site does not have an active SSL certificate.

Click 'Next' on the initial screen.

Then, choose the option for 'Import a certificate from a .pfx file', and click Next.

Now, we have to locate the .PFX file. In the previous Knowledge Base article, we saved the file to the Desktop. Let's go there to retrieve it by clicking 'Browse'.

Click on 'Desktop' to get to the desktop, then click on the 'example.com.09.pfx' file to highlight it, and then click on 'Open'.

With the path now set, place a check-mark in the field which says, 'Mark cert as exportable'. This way, the certificate can be re-exported to a PFX file if need be. If this option is unchecked, the certificate will stay in place for that site until it is either renewed or removed, and cannot be exported again. Once the option is set, click Next.

Next, you will be prompted for the password assigned when the PFX file was originally exported. Without the password, the PFX will not be able to be imported, and will essentially be rendered useless. Once the password is entered, click Next.

If the password is incorrect, you will receive a message that confirming as such. If the password is correct, the next screen will confirm the port to be used for secure communications, which is '443'. This is default port for SSL communications, and can be left as is. Click Next to continue.

The next screen will confirm the details regarding the certificate. Click Next to continue.

Finally, the last screen in the process will confirm the successful operation. Click Finish.

You will now see the 'View Certificate' button is active, confirming the certificate is installed. Click the button to view the details of the certificate, and click OK when finished.

You have now successfully imported an SSL Certificate, and the domain will now display properly under a secure heading.

If you have any questions regarding this or other procedures, please don't hesitate to contact our Technical Support Department, and they will be more than happy to assist.