Export TLS Certificate on Windows Servers Using MMC

Export your TLS certificate as a PFX backup file from a Windows server using MMC

1. In the Run dialog box, type mmc, and then select OK. The Microsoft Management Console (MMC) appears.
2. If you don't have Certificate Manager installed in the MMC, you'll need to install it.
   1. On the File menu, select Add/Remove Snap In
   2. Select Add and then Select Certificates from the Available Standalone Snap-ins dialog box and select Add.
   3. Select Computer Account and then Local Computer.
   4. The Certificate Manager MMC has been installed.
3. In the console tree in the left-hand pane expand the Certificates (Local Computer) node, and then the Personal node. Note that to view certificates in the local machine store, you must be in the Administrator role.
   
4. Right-click the certificate you want to export, select All Tasks, and select Export to start the Certificate Export Wizard.
   
5. Select Next.
6. On Export Private Key, select Yes to export the private key.

   Important: You must export the private key along with your certificate for it to be valid on your target server. Otherwise, you will have to request a new certificate for the target server.

7. In the Export File Format dialog box, select the format you want for the certificate. If the certificate has already been formatted, that format is selected as the default (should be .pfx). Select Next.

   Don't select Delete the private key if export is successful, because this will disable the TLS site that corresponds to that private key.

8. Select the include all certificates in the certification path if possible checkbox.
9. Continue to follow steps in the wizard, and enter a password for the certificate backup file when prompted. Using a strong password is highly recommended because it ensures that the private key is well protected.
10. Type the name of the file you want to export, or select Browse to search for the file. Select Next.
11. Select Finish to complete the Certificate Export Wizard.