How to move or copy a SSL certificate from one Windows Machine to...

Expand / Collapse
 

How to move or copy a SSL certificate from one Windows Machine to another Windows Machine


If you need to move a root trusted or self-signed SSL certificate from one Windows Machine to another this article will detail the process.

In this example we are moving a root trusted SSL certificate we purchased for www.zensoftware.co.uk to a new machine.

Exporting the SSL certificate from the old machine

1. Choose Start and type mmc then press enter to launch the Microsoft Management Console.



2. Choose File -> Add/Remove Snap-in...



3. Choose 'Certificates' and press 'Add >' ...



4. Choose 'Computer Account' and press 'Next'...



5. Ensure 'Local Computer' is selected and press 'Finish' then 'OK'...



6. Expand out Certificates (Local Computer) -> Personal -> Certificates and you should see the SSL certificate you want to move to the new machine...


7. Double click the SSL Certificate to open it and confirm that the Private Key is present (without it you won't be able to successfully use this certificate on the new machine)...



8. Press 'OK' once you've confirmed this.

9. Right click on the SSL certificate you want to move and choose All Tasks -> Export...



10. Press 'Next'...



11. Select 'Yes, export the private key' and press 'Next'...



12. Select 'Include all certificates in the certification path if possible' and press 'Next'...



13. Enter a suitable password (you'll need this when you import the SSL certificate on the new machine) and press 'Next'...



14. Select a path and suitable filename for the SSL certificate file and press 'Next'...



15. Select 'Finish'



You've now exported your SSL Certificate!

16. Close the MMC.

Importing the SSL certificate on the new machine

1. Copy the pfx file you've created in the steps above to a suitable location on the new machine.

2. Choose Start and type mmc to launch the Microsoft Management Console...



3. Choose File -> Add/Remove Snap-in...



4. Choose 'Certificates' and press 'Add >' ...



5. Choose 'Computer Account' and press 'Next'...



6. Ensure 'Local Computer' is selected and press 'Finish' then 'OK'...



7. Expand out Certificates (Local Computer) -> Personal -> Certificates, then right click on Certificates and choose All Tasks -> Import...



7. Press 'Next'...



8. Browse to the location of the pfx file you've copied from the old machine, select the certificate and press 'Next'...



Note: when browsing for the certificate file, Windows will default to 'X.509 Certificate (*.cer, *.crt)'. You need to drop down the box in this location and choose 'Personal Information Exchange (*.pfx, *.p12)' in order to select your file.

9. Enter the password you defined when you exported the SSL certificate from the old machine and select 'Mark this key as exportable. This will allow you to back up or transport your keys at a later time' then press 'Next'...



10. The SSL certificate will be located in the 'Personal' Certificate store, press 'Next'...



11. Select 'Finish'...



You've now imported your SSL Certificate!

12. To confirm all is well double click the SSL Certificate to open it and confirm that the Private Key is present...



13. Close the MMC.

If you are using MDaemon you can now tell MDaemon to use that SSL certificate on the new machine. These related articles help explain the process...