PowerShell - Export SSL Certificate, Copy to other Network machines, Import SSL Certificate on each machine

How to Export and Import SSL Certificates on Windows Servers.
[Exporting] and [importing] [SSL Certificates] are a necessary evil for all [Network Administrators].
In this Article, we will copy files from one server to all others within our Network.

There will be two codes for each command.
1 - copy and paste into PowerShell
2 - Copy and paste into a file, name it with a .ps1 extension.

If you are using a different machine, you will need the first line; otherwise, omit it.
This will connect you to the server from which you will export the certificate.
Enter-PSSession -ComputerName webcore1 $thumprint = (Get-ChildItem -Path Cert:\LocalMachine\WebHosting | Where-Object {$_.Subject -match "CN=autodiscover.DOMAINNAME.COM"}).Thumbprint $pwd = ConvertTo-SecureString -String "YOURPASSWORDGOESHERE" -Force -AsPlainText Get-ChildItem -Path Cert:\LocalMachine\WebHosting\$thumprint | Export-PfxCertificate -FilePath G:\SSL\DOMAINNAME.pfx -Password $pwd

[PS1] Version
try { Enter-PSSession -ComputerName webcore1 $thumprint = (Get-ChildItem -Path Cert:\LocalMachine\WebHosting | Where-Object {$_.Subject -match "CN=autodiscover.DOMAINNAME.COM"}).Thumbprint $pwd = ConvertTo-SecureString -String "YOURPASSWORDGOESHERE" -Force -AsPlainText Get-ChildItem -Path Cert:\LocalMachine\WebHosting\$thumprint | Export-PfxCertificate -FilePath G:\SSL\DOMAINNAME.pfx -Password $pwd Write-Host "Exported Successfully!" } catch {     write-error "Something went wrong: $($_.Exception.Message)" return     }

If you are like me and have many machines to apply this Cert to, do the following.
Run the following command (I always give my certs the date they were made as their name; this helps when deleting the old ones on each machine).
Copy-Item -Path 'G:\SSL\YOURDOMAIN-02-14-2026.pfx' -Destination \\Webcore2\g\SSL\YOURDOMAIN-02-14-2026.pfx Copy-Item -Path 'G:\SSL\YOURDOMAIN-02-14-2026.pfx' -Destination \\Webcore3\g\SSL\YOURDOMAIN-02-14-2026.pfx Copy-Item -Path 'G:\SSL\YOURDOMAIN-02-14-2026.pfx' -Destination \\Webcore4\g\SSL\YOURDOMAIN-02-14-2026.pfx
[PS1] (Each within their own, this makes it easier to catch any issues during the copying process.)
try { Copy-Item -Path 'G:\SSL\YOURDOMAIN-02-14-2026.pfx' -Destination \\Webcore2\g\SSL\YOURDOMAIN-02-14-2026.pfx Write-Host "Exported Successfully!" } catch {     write-error "Something went wrong: $($_.Exception.Message)" return     }
try { Copy-Item -Path 'G:\SSL\YOURDOMAIN-02-14-2026.pfx' -Destination \\Webcore3\g\SSL\YOURDOMAIN-02-14-2026.pfx Write-Host "Exported Successfully!" } catch {     write-error "Something went wrong: $($_.Exception.Message)" return     }
try { Copy-Item -Path 'G:\SSL\YOURDOMAIN-02-14-2026.pfx' -Destination \\Webcore4\g\SSL\YOURDOMAIN-02-14-2026.pfx Write-Host "Exported Successfully!" } catch {     write-error "Something went wrong: $($_.Exception.Message)" return     }


Next, we will [import] the new [SSL Certificate] into each of the Servers to which we copied the files.

Enter-PSSession -ComputerName WebCore2
$pwd = ConvertTo-SecureString -String "YOURPASSWORDGOESHERE" -Force -AsPlainText
Import-PfxCertificate -FilePath G:\SSL\DOMAINNAME-02-14-2026.pfx Cert:\LocalMachine\WebHosting -Password $pwd
Exit-PSSession


Enter-PSSession -ComputerName WebCore3 $pwd = ConvertTo-SecureString -String "YOURPASSWORDGOESHERE" -Force -AsPlainText Import-PfxCertificate -FilePath G:\SSL\DOMAINNAME-02-14-2026.pfx Cert:\LocalMachine\WebHosting -Password $pwd Exit-PSSession

Enter-PSSession -ComputerName WebCore4
$pwd = ConvertTo-SecureString -String "YOURPASSWORDGOESHERE" -Force -AsPlainText
Import-PfxCertificate -FilePath G:\SSL\DOMAINNAME-02-14-2026.pfx Cert:\LocalMachine\WebHosting -Password $pwd
Exit-PSSession


[PS1] (Each within their own, this makes it easier to catch any issues during the copying process.)
try { Enter-PSSession -ComputerName WebCore2 $pwd = ConvertTo-SecureString -String "YOURPASSWORDGOESHERE" -Force -AsPlainText Import-PfxCertificate -FilePath G:\SSL\DOMAINNAME-02-14-2026.pfx Cert:\LocalMachine\WebHosting -Password $pwd Exit-PSSession Write-Host "Imported Successfully!" } catch {     write-error "Something went wrong: $($_.Exception.Message)" return     }
try { Enter-PSSession -ComputerName WebCore3 $pwd = ConvertTo-SecureString -String "YOURPASSWORDGOESHERE" -Force -AsPlainText Import-PfxCertificate -FilePath G:\SSL\DOMAINNAME-02-14-2026.pfx Cert:\LocalMachine\WebHosting -Password $pwd Exit-PSSession Write-Host "Imported Successfully!" } catch {     write-error "Something went wrong: $($_.Exception.Message)" return     }
try { Enter-PSSession -ComputerName WebCore4 $pwd = ConvertTo-SecureString -String "YOURPASSWORDGOESHERE" -Force -AsPlainText Import-PfxCertificate -FilePath G:\SSL\DOMAINNAME-02-14-2026.pfx Cert:\LocalMachine\WebHosting -Password $pwd Exit-PSSession Write-Host "Imported Successfully!" } catch {     write-error "Something went wrong: $($_.Exception.Message)" return     }

Next, open [IIS]
Select each Domain
Go into [Bindings]
Set each [domain] and [sub-domain] to the new Cert.