SSL Certificate Import

Hi all... post 1 here, so please go easy on me. Tried searching for this topic, but not much success:

 

 

Trying to import an SSL certificate, to offload HTTPS for a Sharepoint web farm using BIGIP LTM 6400 9.3.1. The cert currently is installed on WFE 1 (Win2008, IIS7).

 

 

If I export the cert from IIS, the only option I have is to export as password-protected .PFX. When I import certificate (Local Traffic >> SSL Certificates >> Import SSL Certificates and Keys), I get:

 

IMPORT FAILED: CERTIFICATE/KEY MISMATCH

 

 

If I export from MMC>Certificates, including the private key, again the only option I have is to export as password-protected .PFX. Same results when I import certificate (Local Traffic >> SSL Certificates >> Import SSL Certificates and Keys), I get:

 

IMPORT FAILED: CERTIFICATE/KEY MISMATCH

 

 

If I export from MMC>Certificates, this time NOT including the private key, and export as .CER. Same results when I import certificate (Local Traffic >> SSL Certificates >> Import SSL Certificates and Keys), I get:

 

IMPORT FAILED: CERTIFICATE/KEY MISMATCH

 

 

I've confirmed that the name on the cert matches what I've entered for "Certificate Name" on the import screen, and neither time have I been prompted to supply the password.

 

 

I was told by support that I needed to upgrade to get the password-protected file to work, so we went to 10.0.1 on a test system running the same config as production...now I get:

 

 

If I export from MMC>Certificates, including the private key, again the only option I have is to export as password-protected .PFX. Same results when I import certificate (Local Traffic >> SSL Certificates >> Import SSL Certificates and Keys), I get:

 

IMPORT FAILED: CERTIFICATE/KEY MISMATCH

 

 

If I export from MMC>Certificates, this time NOT including the private key, and export as .CER. This time it imports successfully, but still doesn't prompt me for a password.

 

 

What am I doing wrong on the 9.3.1 version?

 

How do I separate the private key from the .PFX to import into another area?