Exporting a Private Key from Windows Server

To export a private key, you must create a .pfx file using the following steps:

1. Create an MMC Snap-in

• Right-click the Start button and select Run.
• Type mmc and press OK.
• In the MMC window, go to File > Add/Remove Snap-in.
• Choose Certificates, then click Add.
• Select Computer account, click Next, and choose Local Computer.
• Click Finish and return to the main console.

2. Export the Certificate

• Navigate to Certificates > Personal > Certificates in the MMC console.
• Right-click the target certificate and choose All Tasks > Export.
• Follow the wizard and select Yes, export the private key. (If unavailable, ensure the private key was marked exportable during creation.)
• Choose Personal Information Exchange – PKCS #12 (.pfx) and enable Include all certificates in the certification path.
• Set a secure password for the .pfx file and save it to a desired location.
• Complete the wizard and confirm export success.

Importing the .pfx File to Another Server

Using MMC

• Open MMC and navigate to Certificates > Personal.
• Right-click the folder and choose All Tasks > Import.
• Select the .pfx file, enter the password, and enable Mark this key as exportable.
• Choose Automatically select the certificate store and complete the wizard.

Using IIS Manager

• Open IIS Manager from Administrative Tools.
• Select the target server in the left menu and choose Server Certificates under Security.
• From the Actions menu, click Import.
• Select the .pfx file, enter its password, and allow export if needed.
• Confirm the import process.