Help Center
Help Center
Getting Started and Quick Guides
Users
Administrators
🧩Area: Administrators
🎓 Administrator Onboarding
SecuMails
Outlook Add-In (Classic Outlook)
Outlook Add-In (new Outlook)
FTAPI Gateway
Trust Networks
SecuRooms
SecuRooms Drive
SecuForms
Server Settings
General Server Settings
📋 User Account Cleanup: Automatically deactivate or delete inactive accounts📋 User Management: Creating user accounts manually, automatically, or via AD📋 User management: Assigning and changing group memberships📋 User Management: Setting a password for "unregistered" usersEmail delivery: Sender of delivery notifications📋 Email delivery: Emails are not arriving or are landing in spam (DNS configuration)📋 G.Data Virus Scanner: Configuring MIME types for allowed file types📋 Group Management: Configuring Permissions, Licenses, and Priority Rules📋 LDAP: Exporting LDAPS certificate via MMC or OpenSSL📋 Limits: Configuring size and download limits per group and product❓MySQL: Upgrade from 8.0 to 8.4📋 OpenSSL: Converting certificate formats (.cer, .crt, .pem) to .pfx📋 SecuPass: Activate and set up end-to-end encryption (E2E)📋 SecuPass: Resetting end-to-end encryption📋 Security: Restrict available security levels per group📋 SSO: Renewing SAML credentials for a Relying Party (RP)📋 SSO: Setting up SAML Single Sign-On with ADFS📋 SSO: Exporting and updating the SAML certificate (metadata) from IdP📋 SSO: Adjusting token lifetime on ADFS server via PowerShell and console📋 System: Setting up a custom SMTP relay for deliveries and notifications📋 System: Configuring Login Disclaimer (Terms of Use) for Users📋 Windows: Create a .p12 / .pfx certificate from a .p7b file
Templates
Miscellaneous
Download Center
Changelog

📋 OpenSSL: Converting certificate formats (.cer, .crt, .pem) to .pfx

This article shows administrators how to use the command-line tool OpenSSL to convert various SSL certificate formats into the required .pfx file and how to include intermediate certificates.

📋 OpenSSL: Converting certificate formats (.cer, .crt, .pem) to .pfx

If your SSL certificate is in a format such as .cer, .crt, or .pem and you possess the corresponding private key (usually a .key file), you can use OpenSSL to convert these into the required .pfx format.

OpenSSL is a command-line tool available on many servers.

Converting the certificate

Use the following command in the command line (terminal or command prompt):

openssl pkcs12 -export -out YourCertificate.pfx -inkey YourPrivateKey.key -in YourCertificate.cer

 

Replacing placeholders

Replace the placeholders in the command above with your actual file names:

  • YourCertificate.pfx: The desired name for the new .pfx file.
  • YourPrivateKey.key: The file name of your private key.
  • YourCertificate.cer: The file name of your certificate (can also be a .crt or .pem file).

Including intermediate certificates

If you also need to include intermediate certificates (these are often provided by the CA as a separate file, e.g., IntermediateCertificates.pem), extend the command as follows:

openssl pkcs12 -export -out YourCertificate.pfx -inkey YourPrivateKey.key -in YourCertificate.cer -certfile IntermediateCertificates.pem

 

Additionally, replace IntermediateCertificates.pem with the file name of the file containing your intermediate certificates.

Setting an export password

During the process, you will be prompted to set an export password for the .pfx file. This password will be required for later installation.

Important: The assigned password must be communicated to FTAPI Support along with the .pfx file via a secure channel (e.g., SubmitBox).

Related articles

❓ What to do in case of "Insecure connection" / expired SSL certificate?

📋 Windows: Create .p12 / .pfx certificate from a .p7b file

Was this article helpful?

English
Powered by Product Fruits