Server Fault is a question and answer site for system and network administrators. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

With IIS 7 I succeeded to import a new SSL certificate to the Trusted Root Certification Authority store, and then to the Personal store. In the web site binding properties in IIS manager, I wanted to bind the certificate to the required IP address and to the port 443, but could not find it in the drop down list. I have rebooted the machine but certificate still not there.

share|improve this question
How did you import the cert? With a pfx file through IIS? – Edwin Jan 17 '13 at 16:17
Run -> mmc -> Add/Remove Snap-ins -> Certificates -> Add -> Ok -> Computer account -> Local computer -> Finish -> Certificates (local computer) -> right click Personal\Certificates folder -> Import -> Certificate Import Wizard -> FileName: MyCertificate.cer -> Place All certificates in the following store: Personal -> Ok -> Finish -> Message: "Import was successful". – Sami-L Jan 17 '13 at 16:34

There are two things you need to in order for the certificate to appear in the list for IIS which you may not have done

  • Make sure the certificate you are importing includes the private key
  • Import the certificate into the machine account and not the user account
share|improve this answer
The imported certificate includes the private key, and into the machine account. – Sami-L Jan 17 '13 at 16:08
@Sami-L While I assume that this has been resolved a long time ago, what you wrote in another comment about the .cer file having been delivered to you from the CA means that it does in fact NOT include your private key. (Only the public key is included in the CSR, by design.) The first point in Phil's answer is very likely the problem you had. – Håkan Lindqvist Apr 6 '14 at 9:24
up vote 2 down vote accepted

The way I succeeded binding the certificate to the web site:

1/- In the IIS manager.I clicked on the server, then double clicked "Server Certificates", then clicked on Complete certificate Request in the actions panel. I receipt an error message, which is a known issue (because "friendly name" property of the certificate is left blank) that I closed.

2/- In the Certificates snap-in (Start -> Run -> mmc -> Add/Remove Snap-ins -> Certificates -> Add -> Ok -> Computer account -> Local computer -> Finish -> ) - Certificates(local computer) -> right clicked Personal\Certificates folder, there I found the newly imported certificate and replaced in its properties the "friendly name" by some name.

share|improve this answer

Try to import your pfx through IIS --> From the IIS console, click on the server, then double click "Server Certificates", then click on "Import" in the actions panel. You can import pfx files. You need to convert the cert to pfx first.

share|improve this answer
Please how to convert .cer to .pfx ? – Sami-L Jan 17 '13 at 16:48
There's a link in my answer. It's hard to see the a link. You'll need openssl to do the conversion. If you're the trusting type, you can convert the cert at In the Type To Convert To box, be sure to pick PFX/PKCS#12 – Edwin Jan 17 '13 at 16:53
The certificate file is delivered by a third party authority, they also provided the text content at the end of their mail. – Sami-L Jan 17 '13 at 17:03
Sorry Sami, I don't think I can help any further. You'll need files for the private key and certificate at a minimum. – Edwin Jan 17 '13 at 17:11
@Edwin why would you suggest, even with a disclaimer, the possibility of sending the private key to some random site? (A HIGHLY suspicious one as it offers that service.) – Håkan Lindqvist Apr 6 '14 at 9:13

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.