liveBook · Manning

PFX

As explained in Building Web APIs with ASP.NET Core

PFX is a password-protected archive format for storing a private key together with its certificate and certificate chain.

PFX is a password-protected archive format that packages a private key with its certificate and certificate chain. IIS cannot directly import PEM and KEY files, so they must be converted to PFX first. section 12.3.5

A practical PFX conversion workflow is:

  • Install OpenSSL for Windows and locate its executable. section 12.3.5
  • Open a command prompt in the folder containing the PEM and KEY files. section 12.3.5
  • Run the PKCS#12 export command, enter an export password, and confirm it. section 12.3.5
  • After generating the PFX file, safely delete the original PEM and KEY files from the local machine. section 12.3.5

Converting certificate files

The example creates mybglist_origin.pfx from mybglist_origin.pem and mybglist_origin.key with OpenSSL. Adjust the executable path and filenames when they differ. section 12.3.5

How Building Web APIs with ASP.NET Core covers it

How deep it goes
Defines PFX through a conversion workflow and prepares the generated file for IIS import.
Examples
Uses mybglist_origin.pem, mybglist_origin.key, and mybglist_origin.pfx in an OpenSSL export command.
What it assumes
Starts with existing PEM and KEY files and explains their conversion rather than certificate creation.
What you can do after
Build it from scratch by converting certificate files with OpenSSL and protecting the resulting archive with an export password.
How it connects
Links PFX with PEM, private keys, SSL/TLS certificates, IIS, OpenSSL, and PKCS#12.
Cover of Building Web APIs with ASP.NET Core
liveBookmanning.com
Read Building Web APIs with ASP.NET Core on liveBook Get the book at manning.com

Related concepts

This explainer was generated by Manning's knowledge graph from the text of Building Web APIs with ASP.NET Core. The section links point to the parts of the book it draws on.