TLS Implementation for VCM
TECHNICAL WHITE PAPER / 18
8. Select the certificate to be exported. Right-click, and then select
All Tasks | Export
.
9. The
Certificate Export
wizard appears. Click
Next
.
10. The
Export Private Key
dialog box appears. If the private key for this certificate is available and is marked as
exportable, you will have the option of exporting the private key.
11. The
Export File Format
dialog box appears. If you are exporting the private key, you must use the *.pfx for-
mat. If not, choose the Base-64 encoded X.509 format. This creates a file that can be imported by several VCM
tools.
12. If you are exporting the private key, you will be prompted to enter a password. This password is intended to pro-
tect your private key during transport. The password will be required to import the file. If you leave the password
fields blank, no password is required on import.
13. The File to Export dialog box appears. Click
Browse
to navigate to a file. If you are exporting the private key,
the location should be secure.
14. The
Summary
dialog box appears. Verify your settings, and then click
Finish
.
Importing Certificates (Windows Only)
There are two ways in which you can import a certificate. Your machine may be set up with file associations that allow
you to view and import certificate files. This method imports certificates to the appropriate store for the current user.
Because VCM expects to find certificates in the Local Computer stores, the certificates would have to be moved.
Although MMC allows you to move certificates with drag-and-drop, it doesn’t work correctly on some versions of the
operating system.
The second way to import certificates uses MMC and the import wizard with an explicit location, as shown in the
following procedure.
Using MMC to Import Certificates
1. Open Microsoft Management Console (click
Start | Run
, and then enter
MMC
).
2. Click
File | Add/Remove Snap-in
.
3. Click
Add
, and then select
Certificates
from the
Add Standalone Snap-in
dialog box.
4. Click
Add
.
5. Select the computer account for the local machine for which the snap-in will manage certificates, and then click
Finish
.
6. Click
Close
, and then click
OK
.
7. Navigate to the local computer certificate stores, and then right-click the store to which you will be importing cer-
tificates. Select
All Tasks | Import
.
8. The
Certificate Import Wizard
appears. Click
Next
.
