OpenSSL is an open-source command-line toolkit for cryptography, certificates, and related security files. In a Windows deployment, it converts PEM and KEY certificate files into a PFX file that IIS can import. section 12.3.5
Use OpenSSL for the IIS certificate-import workflow:
- Install Win64 OpenSSL v3.0.5 Light, whose basic features are sufficient for this conversion. section 12.3.5
- Open a command prompt, move to the folder containing the PEM and KEY files, and run the PKCS#12 export command. section 12.3.5
- Enter and remember an export password, then use the generated PFX file in IIS and delete the unnecessary PEM and KEY files locally. section 12.3.5
Convert PEM and KEY files to PFX
"C:\Program Files\OpenSSL-Win64\bin\openssl.exe" pkcs12 -export -out mybglist_origin.pfx -in mybglist_origin.pem -inkey mybglist_origin.key section 12.3.5
"C:\Program Files\OpenSSL-Win64\bin\openssl.exe" pkcs12 -export -out mybglist_origin.pfx -in mybglist_origin.pem -inkey mybglist_origin.key
Open the supplied listing to inspect the complete Windows command used for certificate conversion. section 12.3.5


