Export and import certificates

This article describes the procedure of exporting server certificates and adding a CA to the Trusted Root Certification Authorities certificate store.

Export server certificates

Use the following procedure to export the certificate:

1. Select Run from the Start menu and then enter certmgr.msc.

   The Certificate Manager tool for the current user appears.

2. Locate to Certificates - Current User > Personal > Certificates, right-click the certificate that you want to export, select All Tasks, and then select Export.

   Note

   Make sure you don't export the Private key.

3. Complete the Certificate Export Wizard, and store the certificate file in a suitable location.

Add a private Certification Authority (CA) to the Trusted Root Certification Authorities certificate store

You can manually install the root certificate of a private CA into the Trusted Root Certification Authorities certificate store on a computer by using the following procedure:

1. Select Run from the Start menu, and then enter mmc in the Open box, and select OK.

2. In the MMC console, select File > Add/Remove Snap In.

3. From the Available snap-ins list, select Certificates, and then select Add.

4. In the Certificates snap-in window, select Computer account, and then select Next.

5. In the Select Computer window, leave Local computer selected, and then select Finish.

6. In the Add or Remove Snap-in window, select OK.

7. In the MMC snap-in dialog, expand Certificates (Local Computer) > Trusted Root Certification Authorities and then right-click Certificates. Point to All Tasks, and select Import. The window on the right shows the items of the selected node.

8. Select a certificate you want to export and right-click. Select All Tasks, and then select Import.

9. On the Welcome to the Certificate Import Wizard screen, select Local Machine > Next.

10. Browse to the certificate you exported from a computer that's running SQL Server and complete the wizard.