Moving a SSL cert between Windows Servers

When migrating a website or service to a new Windows server, you may need to transfer your existing SSL certificate. The process involves two steps:

1. Exporting the certificate (with private key) from the old server

2. Importing the certificate on the new server

This guide walks you through each step using the MMC (Microsoft Management Console) and works across Windows Server versions and IIS (7, 8, 10, and above).

✅ Step 1: Export the SSL Certificate from the Source Server

1. Open MMC

   • Press Windows + R, type mmc, and press Enter.

2. Add the Certificates Snap-In

   • Go to File > Add/Remove Snap-in.

   • Select Certificates, click Add.

   • Choose Computer account, then click Next.

   • Select Local computer, then click Finish.

   • Click OK to close the dialog.

3. Locate the Certificate

   • In the left pane, expand Certificates (Local Computer) → Personal → Certificates.

   • Find the certificate you want to export.

4. Export the Certificate

   • Right-click the certificate → All Tasks > Export.

   • In the Certificate Export Wizard, select:

     • Yes, export the private key → Click Next.

     • Keep the default format (usually .PFX) → Click Next.

     • Set a strong password for the export file → Click Next.

     • Enter a file name and path to save the .pfx file → Click Next.

     • Click Finish to complete export.

✅ Step 2: Import the Certificate on the Destination Server

1. Transfer the .pfx File

   • Copy the exported .pfx file securely to the new server.

2. Open MMC and Load Certificates Snap-In

   • Repeat steps 1–3 above on the destination server.

3. Import the Certificate

   • Right-click Personal > Certificates → All Tasks > Import.

   • Follow the Certificate Import Wizard:

     • Select the .pfx file → Click Next.

     • Enter the password you set during export.

     • Check “Mark this key as exportable” (optional but recommended) → Click Next.

     • Ensure the certificate is placed in the Personal store → Click Next.

     • Click Finish.

🔧 Final Step: Assign the SSL Certificate in IIS

1. Open IIS Manager

   • Run inetmgr from the Start menu.

2. Select Your Website

   • In the left pane, expand Sites, and select the site that needs SSL.

3. Edit Bindings

   • In the right pane, click Bindings.

   • Click Add or Edit, set Type to https.

   • Choose the newly imported certificate from the list.

4. Click OK, then Close.

🧠 Tips & Best Practices

• Always use a strong password when exporting a private key.

• Ensure that both servers are secure and have up-to-date antivirus protection before transferring .pfx files.

• Double-check the certificate’s validity period and domain name after import.

• You can automate this process using PowerShell for enterprise environments.

Contact our Help Desk for assistance with migrating your SSL.