Export an SSL Certificate from IIS


In order to move an SSL certificate from one server to another, you must Export the SSL from the server, and import it into the new server. If you followed our IIS SSL guides, exporting a certificate can be accomplished by using the Microsoft Management Console (MMC)


Using the Windows toolbar, search for MMC and run the program.

mmc example

On the toolbar at the top, navigate to File > Add/Remove Snap in….

add or remove snap

On the Available snap-ins list on the left, add the Certificates Snap-in. With Certificates under Console Root, click OK.

Add Snap-in

Click on Certificates found under Console Root. Right Click on the Personal Folder and navigate to: All Tasks > Export.

console export option

Proceed through the Certificate Export Wizard until you are prompted with “Do you want to export the private key with the certificate?”. Select Yes, export the private key and click Next.

Export wizard

If the option is not available, your private key for that certificate is not exportable or was not generated during the CSR creation process. You must reissue the existing SSL from your No-IP account and generate a new CSR.

At the Export File Format window, select Personal Information Exchange – PKCS #12 (.PFX) and Include all certificates in the certification path if possible. Then, click Next.

export wizard format options

Now, you need to add a password to protect the private key, you can leave the encryption type as the default.

private key password entry

Enter a name and click browse to specify where the PFX will be exported.

Export Location

After choosing the location, click Finish. The certificate along with the private key will be exported to the designated location in PFX format.

success message

If you’re moving the certificate to another IIS server, then the next step is to import the certificate.