Server Fault is a question and answer site for system and network administrators. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

Using the guide here:

I have create a certificate authority using OpenSSL. However I would now like to use the Microsoft CA instead.

The question is, is it possible to "import" the root/sub certificates I created with OpenSSL into MSCA?

share|improve this question
up vote 0 down vote accepted

During the installation of Windows certificate services, the installer asks if you want to create a new key pair or use an existing one from before. If you are able to export the private/public key pair as a pfx file from your old CAs you should be able to use them as the new identity when creating the Windows based PKI infrastructure.

share|improve this answer
Is it also possible to import any certificates that have been issued by the old CA? – MrEyes Jul 24 '11 at 20:09
No you cant import from 3rd party product's issued certs database to Windows. – maweeras Jul 25 '11 at 6:00

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.