Create the .pfx file for setup SSL under Windows Server 2012

If you have generated the CSR through Linux or Plesk and then you want to setup the .CRT to WIndows Server, below is the step :

Login to Linux server and run this :

# openssl pkcs12 -export -out mydomain.pfx -inkey mydomain.key -in mydomain.crt -certfile intermediateCA.crt

Note :
mydomain.pfx is the pfx that we will install on Windows server
mydomain.key is the key that you have generated
mydomain.cry is the crt file that Billing has purchased it
intermediateCA.crt is the file that you can download it through Vendor site

Import the certificate in the Windows MMC console

1. Click on the Start menu and click Run.
2. Type in mmc and click OK.

3. Click on the File menu and click Add/Remove Snap-in…

4. If you are using Windows Server 2003, click on the Add button. Double-click on Certificates.

5. Click on Computer Account and click Next.

6. Leave Local Computer selected and click Finish.

7. If you are using Windows Server 2003, click the Close button. Click OK.

8. Right-click on the Personal folder and select All Tasks and then Import…

9. In the Certificate Import Wizard click Next.

10. Click the Browse button and change the file type from “X.509…” to “Personal Information Exchange (*.pfx, *.p12)”. find the .pfx file that you copied over and click Open and then Next.

11. Enter the password that you set when you exported the .pfx file and click “Mark this key as exportable” so you can export the certificate from this machine as well as the original. Click Next

12. Click “Automatically select the certificate store based on the type of certificate” and click Next.

13. Click Finish to complete the wizard.

14. You can now click the Refresh button in the toolbar to refresh and find your certificate in the Certificates folder under Personal. You can verify that it was imported correctly by double-clicking it and looking for “You have a private key that corresponds to this certificate” at the bottom of the certificate dialog.

15. Close the MMC console. You do not need to save any changes.

Assigning the SSL certificate

If you have windows 2012, just follow the binding part of the IIS 7 SSL Certificate Installation instructions.

1. In IIS, go to Bindings on Action panel
2. If you dont see the https, please add it
3. Please choose the SSL certificate that you have just added
4. Click “Assign an existing certificate” and click Next.
5. Click OK