Create the .pfx file
Convert the certificate to Windows-compatible .pfx format.
Create a folder and copy the already generated key, csr and crt files into it.
The crt file can be created by copying the SSL content from the customer portal into a notepad and saving it with the domain name and .crt
Open OpenSSL and navigate to the created directory, run the following command changing the name of the .key, the .crt and how the .pfx will appear
You can assign a simple password, in this case "academicscomco" was assigned
1 openssl pkcs12 -export -macalg SHA1 -keypbe PBE -SHA1-3DES -certpbe PBE-SHA1-3DES -in academics.com.co.crt -inkey academics.com.co.key -out academics.com.co.pfx
Upload the file to a service from which you can generate a link and download it from the client server where the installation will be done.
Install the certificate
To install an SSL certificate on an IIS server 10 in .fpx format, you can follow the following steps:
1. Download the .fpx file from the SSL certificate provider. This file is a certificate signing file that includes the SSL certificate and private key.
2. Open IIS Manager and select the server where the site is located
3. Double click on "Server Certificates" image.png
4. In the "Actions" section, select "Import".image.png
5. In the certificate import wizard, select the .fpx file you downloaded in step 1 and provide the password if requested.
6. Specify the import destination. Select "Web Hosting" as the destination and click "Next".
7. Verify the certificate information and click "Finish" to complete the import.
8. Now, you should see the SSL certificate in the list of server certificates.
9. Select the site within the general server, right click and choose the Edit Bindings option
10.Edit the access through port 443 and if it does not exist you can add a new one, from the SSL list select the one we just created and save.image.png
That's all! You have now installed an SSL certificate in .fpx format on your IIS 10 server, if it is not displayed correctly you can try restarting the web server.
Be sure to renew the certificate before it expires to avoid security issues.