Export and import an SSL certificate to a new server

To migrate an existing certificate to a new server, we first need to export it.

1. Log in on the old server through RDP
2. Go to "Run" and type "MMC"
   
   
   
   
   
3. Go to File > Add/Remove Snap-in
   
   
   
   
   
   
4. Choose Add > Certificates
   
   
   
   
   
   
   
   
   
   
   
   
5. Go to Personal > Certificates > Your cert > All Tasks > Export
   
    
   
   
   
   
6. Export the certificate with PRIVATE KEY
   
   
   
   
   
   
   
   
   
7. Enter a password (mandatory)
   
   
   
   
   
   
8. Now we transfer the .pfx to the new server. Go to IIS7 and choose the option SSL certificates.
    
   
   
   
   
   
9. Now we can reimport the certificate.
   
   
   
   
   
   
10. Go to "Sites", select the appropriate site and add the HTTPS binding with the certificate.
     
    
    
    
    

    PLEASE NOTE

    Only proceed to this step if there is no PLESK on the server

    
    
    
    
    
    
    

    Server with PLESK

    If the server contains plesk you need to execute the following commands

    
    

     

    Export the private key file from the pfx file

    openssl pkcs12 -in filename.pfx -nocerts -out key.pem

    Export the certificate file from the pfx file

    openssl pkcs12 -in filename.pfx -clcerts -nokeys -out cert.pem

    Remove the passphrase from the private key

    openssl rsa -in key.pem -out server.key