Please ensure Javascript is enabled for purposes of website accessibility
Powered by Zoomin Software. For more details please contactZoomin

Edge HMI

TABLE OF CONTENTS

Import Secure Channel certificates with the MMC

Save PDF
Save selected topicSave selected topic and subtopicsSave all topics
Share
Share to emailCopy topic URL
  • Last UpdatedOct 29, 2026
  • 4 minute read

This is a procedure for importing Secure Channel certificates from certificate files, using the Windows Microsoft Management Console (MMC).

You can use the Microsoft Management Console (MMC) Import function to import (also referred to as installing) certificates into Windows certificate stores, from certificate files with a key pair (PFX) or with the public key (CER).

Here are the steps of the import procedure. It shows images from importing the gateway host CA certificate, but the instructions cover all of the Import options.

  1. In the MMC, select the Console Root > Certificates (Local Computer) > Trusted Root Certification Authorities store. Either right-click the Trusted Root Certification Authorities store or open the Action menu, then click All Tasks, then click Import... to open the Certificate Import Wizard. Click Next to continue.

    Microsoft Management Console Root Certificates dialog

    Certificate Import Wizard

  2. At this wizard panel, fill in the destination folder through typing or browsing. This is a standard Windows interface. Find the CER or PFX CA file and click Next.

    Certificate Import Wizard dialog showing filename

  3. If the CA file is a PFX file, fill in the Password field with the certificate password. Check the Mark the key as exportable ... and Include all extended properties check boxes, then click Next.

    Certificate Import dialog showing password box

  4. In the Certificate Store panel, Place all certificates in the following store: should be selected, with the correct store in the Certificate store: field. If not, select the radio button and browse to the correct store, then click Next.

    Certificate Import Wizard location dialog

    Tip: When importing a certificate (not CA) PFX file using the MMC, the CA certificate (without private key) will be imported to the certificate store as well. This file isn't needed, and can be deleted or left in place. This CA certificate will not be imported if using the SecureChannelCertificateInstaller.ps1 script.

  5. At this wizard panel, you can review the choices made so far. If something should be changed, use the upper left-hand corner back arrow to navigate to the appropriate panel. If the settings are correct, click Finish. There will be an additional dialog confirming that the process was successful; click OK.

    Certificate Import Wizard confirmation dialog

  6. In the MMC, you can verify the successful import by looking at the contents of the Console Root > Certificates (Local Computer) > Personal store.

    Certificate store

  7. If the certificate does not have a private key, the import procedure is completed. If the certificate has a private key, continue.

  8. Set the Read permissions for the account if the imported certificate has a private key (the gateway certificate on the gateway host or the client certificate on the client computer): In the MMC, select the certificate with the private key, then right-click it or open the Action menu, then click All Tasks, then click Manage Private Keys... to open the Certificate Import Wizard. Click Next to continue.

    Setting Certificate Store private key management

  9. In the Permissions for <certificate> dialog, check the Allow Read check box if it is not already checked, then click OK.

    Certificate permissions

The import certificate procedure is completed.