Certificate Transfer

28 Oct 2008 11:59 PM

Troy Bruder

Hello,

Can a SSL certificate be transferred from a Win2k3 IIS box to Win2k8 IIS?

Troy

29 Oct 2008 9:41 PM

David Wang

On Oct 28, 4:59 pm, "Troy Bruder" <troy_bru***@hotmail.com> wrote:
> Hello,
>
> Can a SSL certificate be transferred from a Win2k3 IIS box to Win2k8 IIS?
>
> Troy

This is really an issue of Certificates that really doesn't have
anything to do with IIS...

It all depends on how you imported the Certificate. If you can export
the private key of the certificate, then you can re-import the
certificate to any other server and later use it with something like
SSL.

If you cannot export the private key, then you will need to obtain the
original certificate to install it on the new server.

//David
http://w3-4u.blogspot.com
http://blogs.msdn.com/David.Wang
//

21 Nov 2008 10:35 PM

Tyrven

In response to: "Can a SSL certificate be transferred from a Win2k3 IIS box
to Win2k8 IIS?"

As long as you have the private key in an exportable format (or the original
PFX file with password) then, yes, getting a certificate transferred to
another operating system (Windows 2008, Unix, OS X, etc) shouldn't be a
problem.

Assuming you're referring to an SSL certificate for a site: once you process
a certificate request, IIS generates a public and private key pair and stores
them in your machine's certificate store. By default, this is marked as
exportable and doesn't include a password. At that point, you can export the
pair, import it on another machine and then wire it up to an IIS site.

In Windows 2003 with IIS 6.0 you export the certificate using the
Certificates MMC Snap-In (connect to "My Computer"; it'll be located under
"Personal"). In Windows 2008 with IIS 7.0 you can import the certificate
using the "Server Certificates" feature of the server. Once that's done, you
can associate it using bindings for the particular site.

Hope this helps,
Tyrven