How to convert the Microsoft .p7b certificate format to .pem format


Article ID: 168494


Updated On:


ProxyAV Software - AVOS ProxySG Software - SGOS


Digital certificates issued by Microsoft are in a format (p7b) that cannot be imported to the ProxySG appliance.


The following example converts a digital certificate in p7b (PKCS#7) format to PEM format.

Note: This has been tested on Windows XP, 7, 8, Server 2003, and 2008.
  1. Double-click the file (cert.p7b) in Windows Explorer. Certificate window opens.
  2. In the left pane of the Certificates window, expand all and click Certificates. The right pane displays a list of certificates.
  3. Select the certificate.
  4. Right-click the certificate and select All Tasks > Export.
  5. In the Certificate Export Wizard that opens, click Next.
  6. Select Base-64 encoded X.509 (.CER) and click Next. Note that Base-64 encoded X.509 is PEM format.
  7. In the File name: field, enter a new name for the certificate export (cert.cer).
  8. Click Next > Finish to export. The new file (cert.cer) is now in PEM format.
  9. Open the file with a text editor such as Notepad.
  10. Copy the contents of the file.
  11. Import the certificate:
    • In the ProxySG Management Console, select Configuration > SSL > CA Certificates.
    • On the CA Certificates tab, click Import. The Import CA Certificate dialog opens.
    • Enter a name for the certificate.
    • Click Paste From Clipboard. The contents of the file are pasted into the CA Certificate PEM field.
    • Click OK.