You can use the Certificate Manager MMC snap-in to back up server certificates.
Important
You must be a member of the Administrators group on the local computer to perform the following procedure or procedures. As a security best practice, log on to your computer by using an account that is not in the Administrators group, and then use the runas command to run IIS Manager as an administrator. At a command prompt, type runas /User:Administrative_AccountName "mmc %systemroot%\system32\inetsrv\iis.msc".
1. | If you do not have Certificate Manager installed in the MMC, install it. |
2. | Locate the correct certificate store. This is typically the Local Computer store in Certificate Manager. |
3. | In the Personal store, click the certificate that you want to back up. |
4. | On the Action menu, point to All tasks, and then click Export. |
5. | In the Certificate Manager Export Wizard, click Yes, export the private key. |
6. | Follow the wizard default settings, and enter a password for the certificate backup file when prompted. |
Important
Do not select Delete the private key if export is successful, because this will disable your current server certificate.
1. | Complete the wizard to export a backup copy of your server certificate. |
1. | To open an MMC console:
| ||||||
2. | On the File menu, click Add/Remove Snap-in. | ||||||
3. | In the Add/Remove Snap-in box, click Add. | ||||||
4. | In the Available Standalone Snap-ins list, click Certificates, and then click Add. | ||||||
5. | In the Certificates snap-in box, click Computer Account, and then click Next. | ||||||
6. | In the Select Computer box, click Local Computer, and then click Finish. |
| • | For general information about certificates, see SSL and Certificates. |