Windows servers accept certificates in .PFX format. Typically, you may have a certificate in three separate files: a Private Key (privateKey.key), a Certificate (certificate.crt), and a CA Bundle (ca.crt). These need to be combined into a single .PFX file, which can be done on Linux using the following command:
openssl pkcs12 -export -out certificate.pfx -inkey privateKey.key -in certificate.crt -certfile ca.crt
Alternatively, you can use third-party tools like the SSL Converter to perform the conversion.
SSL Installation
Once your certificate is in .PFX format, you can install it through Internet Information Services (IIS).
- Open Internet Information Services (IIS).
- Select your server name.
- Double-click Server Certificates.
- In the Actions section on the right, click Import.
- In the pop-up window, click the ... button and navigate to your certificate file.
- Enter the password you used during the conversion in the Password field.
- Under Select Certificate Store, choose Personal if you do not want to use SNI technology.
After saving, the certificate will be installed on your server.
Assigning SSL to a Site
- Select your site in IIS and click Bindings in the Actions section.
- In the pop-up window, click Add.
- A new window will open.
- Set the Type to https.
- In the IP address field, select whether to assign a specific IP address (keep the same settings as for port 80).
- Leave the Port field unchanged.
- Enter your domain in the Host name field.
- Under SSL Certificate, select the certificate you just installed and click OK.
This will assign the SSL certificate to your website.
