Skip to main content
ClientPay Free SSL Certificate Installation
Updated over a week ago

Locate the file that contains your encrypted public private key pair (ending in .pfx) and copy it to the staging area on your web server.

From your Windows command prompt, type “mmc.exe”

  • Upon the opening of Microsoft Management Console, follow these steps

  • “File”

  • “Add/Remove Snap-In” (Figure 1)

  • “Certificates”

  • “Add”

Figure 1

Select "Computer account", "Next" (Figure 2)

Figure 2

Select “Local computer”, “Finish” (Figure 3)

Figure 3

Click “Ok” (Figure 4)

Figure 4

Expand the “Personal folder” (Figure 5)

  • Right-click on the “Certificates” folder

  • Select “All Tasks”

  • Select “Import”

  • “Next”

  • Browse to and select the .pfx file

  • “Next”

  • Select “Place all certificates in the following store”

  • Browse to and select “Personal”

  • “Next”

Figure 5

“Finish” (Figure 6).

Figure 6

Your personal certificate should now appear in the list of Personal Certificates (Figure 7).

Figure 7

Binding the IIS Endpoint with a .pfx file

Once the .pfx file is installed, you need to use it to bind your endpoint in IIS. Select the ClientPay site in the left side bar and then click on Bindings on the far right of the IIS console (Figure 8 below).


Figure 8

Add a new https binding. You will not be able to change an http binding to https and you will not be able to delete the binding if there is only one so you need to create a new binding and then delete the original one afterward.

Assign the port and leave the “Host name” empty and IP address at “All Unassigned” unless you have a reason to assign a specific address. The port must be either 443,444, 8080, or 32321.

If you are using an AffiniPay-generated .pfx, you will see a warning regarding an intermediate certificate (Figure 9). You can click OK and ignore this.


Figure 9

Testing the connection

If you have completed all of the above steps, email [email protected] to let them know you just installed the free certificate and need them to run a connection test. If the test is successful, the process is complete. If there are any errors, our team will work with you to troubleshoot.

Did this answer your question?