Import server certificates for Message Queuing

Applies To: Windows Server 2003, Windows Server 2003 R2, Windows Server 2003 with SP1, Windows Server 2003 with SP2

To import server certificates for Message Queuing

Click Start, click Run, type mmc, and then click OK.
On the File menu, click Add/Remove Snap-in.
In the Add/Remove Snap-in dialog box, click Add, select Internet Information Services, click Add, click Close, and then click OK.
In the console tree, right-click MSMQ.

Where?
- Console Root/Internet Information Services/*YourComputer/*Web Sites/Default Web Site/MSMQ
Click Properties.
Click the Directory Security tab, and then click Server Certificate. In the Web Server Certificate Wizard, click Next.
Click Import a certificate from a Key Manager backup file, and then click Next.
Enter the path and file name for the backup file you previously created when you exported the certificate from Windows NT 4.0, and then click Next.
Type the proper password, click Next, and then click Finish.
After you have obtained the certificate, open Computer Management.
In the console tree, right-click Message Queuing.

Where?
- Computer Management/Services and Applications/Message Queuing
Click Properties.
In the Message Queuing Properties dialog box, click the Service Security tab, and then in the Server certificates group box, click Select a Certificate.
Under Issued to, select the certificate with the name of the Message Queuing server to which you imported the certificate, and then click OK.

Notes

You can also open the Internet Information Services snap-in as follows: click Start, point to All Programs, point to Administrative Tools, and then click Internet Services Manager. Or, you can open this snap-in after you have added it to a console and saved the console settings in an .msc file as follows: click Start, point to All Programs, point to Administrative Tools, and then click the name of the saved .msc file.
To open Computer Management, right-click My Computer, and then click Manage.
This task applies only if you are upgrading an MSMQ 1.0 controller server to a Message Queuing server installed on a Windows Server 2003 family domain controller.
You must first export the key certificate before you upgrade the computer to Windows Server 2003 family. Then you can import the server certificate. You need to import a server (key) certificate only for each Message Queuing server that will reply to Active Directory queries from MSMQ clients running on Windows NT 4.0, Windows 98, or Windows 95.

Your server might function differently based on the version and edition of the operating system that is installed, your account permissions, and your menu settings. For more information, see Viewing Help on the Web.