Overview diagram of exporting and installing SSL certificate for StoreFront to use HTTPS
Export your certificate
If you already have your SSL certificate in a .pfx file, skip to Import your certificate.
1. On the server containing the certificate you wish to export, click the Windows icon () and type mmc.
Note: The screenshots used in this article were taken on a Windows Server 2012 R2. Images may differ.
2. Click mmc. This opens the Microsoft Management Console.
3. Click File | Add/Remove Snap-in.
4. Select Certificates, then click Add >.
5. Select Computer account, and click Next >.
6. Click Finish.
7. The Certificates snap-in has been loaded. Click OK.
8. Expand Certificates then Personal. Click on Certificates.
9. Right-click on the certificate to export, and select All Tasks, then Export…
10. Click Next.
11. Select Yes, export the private key, then click Next.
12. Click Next.
13. Select the Password: checkbox, then enter and confirm a password to protect the private key. Click Next.
14. Select a location for the certificate. Click Next.
15. Click Finish.
16. Click OK. This creates a .pfx (Personal Information Exchange) file containing the password-protected private key of the certificate.
1. Copy the .pfx to the StoreFront server, or map a drive to the file’s location.
2. Start the Microsoft Management Console (MMC), and add the Certificates snap-in (see steps 1 to 7 above).
3. Expand Certificates, right-click Personal, select All Tasks, and then click Import…
4. Click Next.
5. Click Browse… to locate the certificate.
6. Change the dropdown to look for *.pfx files.
7. Highlight the file and click Open.
8. Click Next.
9. Enter the password used when the certificate was exported. If you want to be able to export the certificate from this server for use on another server, make sure to select Mark this key as exportable. Click Next.
10. Click Next.
11. Click Finish.
12. Click OK.
13. Click Certificates.
14. Right-click on the certificate and select Properties (or double-click the certificate).
15. Confirm that you have the private key for the certificate. That line must be present for the certificate to function correctly.
1. Start InetMgr.
2. Expand IIS Manager, right click on Default Web Site, and click Edit Bindings…
3. Click Add…
Note: Do not remove the http binding.
4. Select the Type: dropdown.
5. Select https, then select the certificate you just imported. Click OK.
6. Click Close.
1. To modify StoreFront to use the SSL certificate, we must change the Base URL. Start StoreFront.
2. StoreFront is not currently using the SSL certificate. Click Server Group in the left pane.
3. Click Change Base URL.
4. Change http: to https: and click OK.
5. StoreFront is now using the SSL certificate. Repeat on any remaining StoreFront servers in the server group.