THE INFORMATION IN THIS ARTICLE APPLIES TO:

• EFT Server, version 6.0 and later

QUESTION

Can I convert an EFT Server certificate to PFX format?

ANSWER

In the EFT Server administration interface, you can create an SSL Certificate with a PFX-format Private Key. However, if you want to convert an existing non-PFX certificate to PFX format, you can do so in OpenSSL using the procedure below.

1. Download the windows OpenSSL command line utility:

Win32 OpenSSL v1.0.0f Light > http://www.slproweb.com/download/Win32OpenSSL_Light-1_0_0f.exe

If you have issues installing or running it, check the site http://www.slproweb.com/products/Win32OpenSSL.html. There are various C++ libraries that may be necessary.

2. Verify operation by executing <install dir>OpenSSL\Bin\openssl.exe at a command prompt:



3. Copy your private key (*.key) and certificate (*.crt) to the /Bin directory.
4. Execute the following command to combine the .KEY and CRT files into a PFX:

openssl pkcs12 -export -out certificate.pfx -inkey clientkey.key -in clientcert.crt



5. When prompted, provide the passphrase for your KEY file and also a new passphrase for the new PFX file.

Refer to Knowledge Base article #10401 - Using OpenSSL to Generate/Convert Keys and Certificates for more information regarding using the OpenSSL command-line tool to generate and convert private keys and public certificates.