Creating an X.509 High-Trust Certificate

Table of Contents

To create a self-signed certificate in IIS:

  1. Open IIS.
  2. On the left menu, select your server.
  3. Double-click Server Certificates in the available Features.
  4. In Actions, select Create Self-Signed Certificate….
  1. Specify a friendly name here (e.g., “KanBo-High-Trust-Certificate“).
  2. Select Personal certificate store.

The certificate should now be available in IIS Certificates.

The certificate is available. Now, we need to export the certificate and the private key file.

To export the certificate and private key:

  1. Right-click the certificate, then select View.

  1. Select Details tab, and then select Copy to File.

The next window allows us to choose whether to export the certificate or the private key. Start with exporting the private key.

  1. Select Yes, export the private key.
  1. In the next window, check the settings as shown below, then select Next.

  1. Select Password and enter a new password. Next, type the password again in the designated fields and select Next.

  1. Choose a name and directory where you want to save it, then select Next and Finish. You should then receive a confirmation that the process was successful.


Now we are going to export the certificate.

  1. In ISS, right-click the certificate, and then select View.

  1. Select Copy to File.

  1. Select No, do not export the private key.

  1. Select Next, and then select the format "DER encoded binary X.509"
  2. Select Next, and choose a file name and directory where you would like to save the certificate.

  1. Select Next, and Finish.

You should now have both the certificate and the private key exported.

Was this article helpful?

Please, contact us if you have any additional questions.