Import certificate to Windows Certificate Store

The certificate, including the private key, as described in the previous section should be imported to computer’s certificates store in a Windows host, where Message Broker is installed. The certificate should be imported to Personal/Certificates folder in the Certificate Store:

Note: the certificate should be imported to the computer certificate store, not the certificate store of the current user.

Double-click the certificate file in Windows Explorer. That should open a certificate import wizard.

Double click certificate you want to import

2. In the wizard, select Local Machine as Store Location.

Certificates import wizard

3. Confirm file path to be imported.

4. Enter password for the private key embedded in the pfx file.

5. Select Personal as a Certificate store.

6. The certificate should be added to the list of certificates on the server.

7. Afterwards, the certificate should be referred to as follows in the yaml configuration file:

  Https:
    Enabled: true
    CertificateStore:
      StoreName: My
      Location: LocalMachine
      CertificateSubject: "*.proaxia-consulting.com"

Note: * is a special character in yaml. To avoid syntax problem, the wildcard certificate name should be put inside quote characters, so that the parser interprets it as a string value.