How to Generate a PFX File on Windows, Linux, and macOS

This article is intended for customers who need to convert their SSL certificate files into a PFX (PKCS#12) file for installation on platforms like Microsoft IIS, Exchange, or other systems requiring a single bundled certificate file.

A PFX file contains:

• Your private key (.key)

• Your SSL certificate (.crt)

• The CA bundle (.ca-bundle, if applicable)

• A password to protect the file

Before You Begin

Make sure you have:

• The private key file for your certificate

• The certificate file issued by the CA

• The CA bundle file (if provided)

Windows (PowerShell)

1. Place your .crt, .key, and .ca-bundle files in the same folder.

2. Open PowerShell as Administrator and navigate to the directory which contains these files.

3. Run:

   • openssl pkcs12 -export -out certificate.pfx -inkey your_private.key -in your_certificate.crt -certfile your_ca_bundle.ca-bundle

   • Make sure to replace the file names with the names of the actual files.

4. When prompted, set a password for the PFX file.

Linux

1. Place your files in a single directory.

2. Open a terminal and navigate to the directory which contains these files.

3. Run:

   • openssl pkcs12 -export -out certificate.pfx -inkey your_private.key -in your_certificate.crt -certfile your_ca_bundle.ca-bundle

   • Make sure to replace the file names with the names of the actual files.

4. Enter a password when prompted.

macOS

1. Place your files in a single folder.

2. Open the Terminal app and navigate to the directory which contains these files.

3. Run:

   • openssl pkcs12 -export -out certificate.pfx -inkey your_private.key -in your_certificate.crt -certfile your_ca_bundle.ca-bundle

   • Make sure to replace the file names with the names of the actual files.

4. Enter a password when prompted.

Important Notes

• The -certfile parameter is optional if your CA bundle is not provided, but recommended for full trust chain compatibility.

• Keep your PFX file secure and do not share it without the password.

• If you are unsure where to obtain the necessary files, please check the related article below or contact our support team.

Related Articles

• Understanding SSL Certificate Files: CSR, Key, CRT, CA-Bundle, and PFX

Updated by SP on 15/08/2025