Server Fault is a question and answer site for system and network administrators. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

I'm having some trouble adding certificates to the server in IIS. I have four .pem files a .jks file and a .pfx file.

I have tried importing them into MMC but they do not appear in the list of available certificates when adding an https binding in IIS.

IIS also returns:

Certificate cannot be used as an SSL certificate

when trying to import from the .pfx file.

I unfortunately have little experience with server/client authorization and my Googling is yielding few useful results. It may be that I am approaching this task incorrectly. Any advice or directions to useful resources would be greatly appreciated.

share|improve this question
IIS has versions 6.0 and 7.0. Nothing else in between. – user May 23 '13 at 11:25
My error. I believe I am on ver 7.5 – Gavin May 23 '13 at 11:47
Did you import the certificate under the computer account? What contents are in the PEM files? – Shane Madden May 24 '13 at 2:05
Yep on the computer account. Pems are: Signed certificate public key; Private key; Intermediate CA; Root CA; My googling has told me I may not even need to add these into IIS at all. Evidently I can just specify the Client Certificate in the WinHTTPRequest though using setClientCertificate and pointing to it in the Certificate Store has yielded no results... – Gavin May 24 '13 at 9:18

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Browse other questions tagged or ask your own question.