See the light!

Importing an SSL certificate to Windows Server 2016 / IIS 10

Restoring a backed-up SSL certificate onto a fresh Windows Server 2016 / IIS 10 box is straightforward once you know the exact sequence in the certificate MMC snap-in.

  1. Access the computer certificate store with the MMC snap-in.
  2. Import your cert to the computer certificate store.
import ssl cert - personal certs

From the certificates store view, right click on Personal and from the context menu, go to All Tasks > Import… You will see the import wizard.

import ssl cert - import wizard

Proceed to the next dialog.

import ssl cert - browse file

Browse the backup certificate file to import. Next.

import ssl cert - private key settings
Provide the password used to protect the backup private key. Mark the key as exportable if you wish to allow exporting of the key from the store later (obviously for backup purpose). Next.
import ssl cert - certificate store
Automatically select the certificate store based on the type of certificate. Otherwise if you place the cert in the wrong store location, the cert may not work. Next.
import ssl cert - completing
Review the summary. Finish.
import ssl cert - successful

Windows Server’s built-in export/import compatibility across versions is what makes this restore-onto-IIS-10 process this painless, assuming your backup is valid.

Also read: exporting an SSL certificate from Windows Server 2008 R2 (IIS 7.5).

Peripheral vision, in this pillar