tools: makecert.exe  cert2spc.exe pvk2pfx.exe

steps:

1. create cer and pvk file

makecert -r -n "CN=<PublisherName>" -b 01/01/2008 -e 01/01/2010 -sv <MyCertName>.pvk <MyCertName>.cer

then a dialog show and enter the cert password

2. generate spc file

cert2spc <MyCertName>.cer <MyCertName>.spc
 

3. generate pfx file

pvk2pfx -pvk <MyCertName>.pvk -spc <MyCertName>.spc -pfx <MyCertName>.pfx -pi <Password> -f

4. install the pfx to mmc (local machine)

5. IIS config key steps

1> enalbe the load user profile in the used application pool

2> grant the iis_iuser access permission on the imported certficate ( right click the imported cert -> all task -> manage private key-> add the iis_iuser)