Geeks With Blogs

Tim Huffam Dotting the I and crossing the T of I.T.

To import a previously exported certificate (.pfx file)

1) Open MMC console for managing certificates.
If you do not have a console shortcut (.msc) setup then:

Add MMC snap-in for certificates:

1.1) Start - Run - enter: mmc

1.2) Within MMC console, select File - Add/Remove Snap-in

1.3) Click Add…

1.4) Select Certificates in list and click Add

1.5) Select Computer account

1.6) Click Next, then Finish

1.7) Once you're back at the MMC console you can save this console setting to a .msc file.

2) Right click on the Personal folder and select All Tasks - Import…

3) Select the .pfx file, click Next, enter password & accept all default settings.

4) It's possible you may need to change the default IIS setting for CRL (certificate revocation list) checking, ie if you work with client certs that will fail the crl check).  In this case you need to turn CRL checking off by setting CertCheckMode to a value > 0.

You can do with with an IIS metabase tool, or adsutil or, if you don’t have these tools installed, do the following:

4.1) Create a .vbs script with the following code:

Set oWeb = GetObject("IIS://localhost/W3SVC")
oWeb.CertCheckMode = 1
Set oWeb = Nothing

4.2) Save this (eg into c:\turnoffcrlscheck.vbs)

4.3) Execute this at the command prompt eg:

cscript.exe turnoffcrlcheck.vbs





Posted on Tuesday, September 27, 2005 12:47 PM OS/Networking/Misc Apps , ASP.NET | Back to top

Comments on this post: Importing previously exported certificate for IIS

# re: Importing previously exported certificate for IIS
Requesting Gravatar...
I did not realized that this is so simple..
Kane from Website Value
Left by Kane on Nov 21, 2011 2:40 AM

# re: Importing previously exported certificate for IIS
Requesting Gravatar...
This really helps and simple. Thanks for your post.
Left by James on Feb 02, 2012 5:13 PM

Your comment:
 (will show your gravatar)

Copyright © Tim Huffam | Powered by: