Exporting and importing certificates - Security Center 5.11

If the server hosting the Unit Assistant role does not have a supported version of Microsoft PowerShell, you can generate the certificate on a server that does. Then, export the certificate and import it on the server that hosts the Unit Assistant role.

1. On the server that has a supported version of Windows PowerShell installed, generate the self-signed certificate and open the Microsoft Management Console.
   Follow the instructions found in Securing the communication between the Unit Assistant role and the Certificate Signing role.
2. Export the certificate that you generated.
   1. In the left pane of the Microsoft Management Console window, expand Personal and click Certificates.
   2. In the right pane of the window, right-click the certificate you created (SigningPluginSSL) and click All Tasks > Export.
      
      The Certificate Export Wizard opens.
   3. Click Next > Yes, export the private key.
      
   4. Click Next and select the options to export all extended properties as shown in the following screen capture.
      
   5. Click Next > Password and enter a security password.
      

      Be sure you remember the password. You need it to import the certificate.

   6. Click Next and give a name to your certificate export file (.pfx).
   7. Click Next, take note of the export settings, and click Finish.
      
   8. Copy the certificate export file to a USB key.
3. Import the certificate on the server hosting the Unit Assistant role.
   1. On the server hosting the Unit Assistant role, connect the USB key containing the certificate export file.
   2. In the Windows taskbar, click and enter Certificates.
   3. In the search results, click Manage computer certificates.
   4. In the left pane of the Microsoft Management Console window, expand Personal, right-click Certificates, and click All Tasks > Import.
      
      The Certificate Import Wizard opens.
   5. Follow the instructions from the Wizard.
4. After the certificate is imported to the Personal store, copy it to the Trusted Root Certification Authorities store.
   Follow the instructions found in Securing the communication between the Unit Assistant role and the Certificate Signing role until the end.