Convert from PFX Format to PEM Format for SSL certifcates imported from IIS

3 users found this article helpful

To use this certificate with a Parallels Client Gateway, one must convert the PFX file to the un-encrypted PEM format.

Use the open-source utility OpenSSL to perform the conversion from PFX to PEM. A downloadable Win32 distribution of OpenSSL is available here:

http://gnuwin32.sourceforge.net/packages/openssl.htm

To convert a PFX file to a PEM file, follow these steps on a Windows machine:

  1. Download and install the Win32 OpenSSL package, using the link above.

  2. Create a folder c:\certs and copy the file cert.pfx (the created PFX file) into the c:\certs folder.

  3. Open a command prompt, and move to the GnuWin32\bin directory, using:

    cd %ProgramFiles%\GnuWin32\bin
    
  4. Type the following command to convert the PFX file to an unencrypted PEM file:

    openssl pkcs12 -in c:\certs\cert.pfx -out c:\certs\cert.pem -nodes
    
  5. When prompted for the import password, enter the password you used when exporting the certificate to a PFX file.

You should then receive a message that says"

MAC verified OK

Note that your browser may not support the display of this image.

This will add the Issuer certificate and list of trusted authorities on the client side, and one would be able to connect over SSL with a certificate from an organization certification authority.

Was this article helpful?

Tell us how we can improve it.