Request and install Seeq SSL certificate under Windows

Click Start > Run. Enter MMC and click OK

Go to File > Add/Remove Snap-in

Select Certificates and click Add

Select Computer account and click Next

Select Local Computer and click Finish

Click OK to close the Snap-ins window

Double-click on Certificates (Local Computer) to expand its view

Click on the Personal folder, then right-click and select All Tasks > Advanced Options > Create Custom Request...

Click Next on the Certificate Enrollment wizard

Select the option Proceed without enrollment policy and click Next to continue

Click the template dropdown and select (No template) Legacy key, select PKCS #10 under Request format and click Next to continue

Expand the Details section by clicking on the arrow pointing down and then click on the Properties button

On the General tab, type in a friendly name for the SSL certificate and (optionally) a description. We recommend using the domain name as the friendly name.

Click on the Subject tab, then select Common name in drop down list under Type. In the value field, enter the fully qualified domain name (FQDN) for the server which will be used for accessing Seeq. Make sure the fully qualified domain name is all lowercase, then click the Add button.

Continue with the same step above for the following fields:

Organization: the organization's legal business name
Organizational Unit: Department in the organization
Locality: Business location, city
State: Business location, state/province
Country: Business location, country code

Add an Alternative name by selecting DNS as the Type and entering an alternative domain name in the value field and then clicking the Add button. Alternative names can be any way that this server might be accessed: different hostnames, IP address, etc.

Add the FQDN and all other hostnames (or IP addresses) that users will use to access this server. If a user attempts to connect to a server via a name or IP address that isn't listed in the certificate, they will receive a certificate error and the connection will fail.

Some browsers (e.g. Google Chrome) will reject a certificate if this field is not present. Multiple alternative names can be added, but should be kept to a maximum of 5.

If the certificate is rejected because of NET::ERR_CERT_COMMON_NAME_INVALID, then verify that Seeq’s web server URL matches at least one entry in this list.

Click on the Private Key tab, then make sure only Microsoft RSA SChannel Cryptographic Provider (Encryption) is checked in the list. There's a bug in this part of the certificate properties, so sometimes other cryptographic service providers suddenly appear checked, which will cause the following steps to fail (other fields either disappear or are disabled), so make sure you scroll up and down the list of cryptographic service providers and make sure to continue only when Microsoft RSA SChannel Cryptographic Provider (Encryption) is checked.

Expand the Key options section by clicking the down arrow. Set the Key size to at least 2048 and make sure to check the box to Make private key exportable

Expand the Key type section, then select the Exchange option. Click Apply, then OK followed by the Next button to continue.

Click on the Browse... button to select the location where the Certificate Signing Request (CSR) should be saved. (You may get a Save As pop-up dialog box.  Enter the file name and desired location here and click "Save", then you'll see the below screen and can continue.  The "Save As" screen won't show the option about "Base 64".  You just have to give the directory and file name first to get to this below screen where you can choose the File Format.)  Make sure to set the File format to Base 64, then click the Finish button.

Now the CSR can be sent/emailed to either an official Certificate Authority (CA) or to the local IT department. (To generate a Self Signed Certificate using OpenSSL, use the steps listed here.) Proceed to the section below once the certificate has been received/generated.

Click Start > Run. Enter MMC and click OK

Go to File > Add/Remove Snap-in

Select Certificates and click Add

Select Computer account and click Next

Select Local Computer and click Finish

Click OK to close the Snap-ins window

Double-click on Certificates (Local Computer) to expand its view

Click on the Personal folder, then right-click and select All Tasks > Import...

Start the wizard by clicking Next

Make sure "Place all certificates in the following store" is selected and make sure the certificate store is set to Personal, then click Next.

Click Browse... and select the received certificate, then click Next to continue the import wizard.

Enter the password for the private key and make sure "Mark this key as exportable" is checked, then click Next.

The certificate should now be successfully imported. You should be able to see the certificate in the list and it should have a golden key on the icon.

Click Start > Run. Enter MMC and click OK.

Go to File > Add/Remove Snap-in

Select Certificates and click Add

Select Computer account and click Next

Select Local Computer and click Finish

Click OK to close the Snap-ins window

Double-click on Certificates (Local Computer) to expand its view

Click on the Personal folder, then right-click on the certificate to export and select All Tasks > Export to open the Certificate Export Wizard

Make sure "Yes, export the private key" is selected, then click Next

Make sure the export format is set to "Personal Information Exchange - PKCS #12 (.PFX)", that "Include all certificates in the certification path if possible" is selected and that "Delete the private key if the export is successful" and "Export all extended properties" are not selected, then click Next.

On the Security page, enter and confirm a password, then click Next.

On the File to Export page, enter a path and file name of the file you want to save to, then click Next.

Verify that all export settings are connect, then click Finish.

The .pfx file should now be in the location selected.