All Products
Search
Document Center

Key Management Service:Import keys and certificates

Last Updated:Mar 31, 2026

To migrate keys from another certificate management system to Certificate Manager, export your keys as a PFX or PKCS#12 file, then import the file through the Key Management Service console.

Important

By default, imported keys can be exported again. To prevent re-export, set Exportable Key to No when you create the certificate — this setting is not available at import time. For details, see Create and download a certificate.

Prerequisites

Before you begin, ensure that you have:

  • Exported your keys from the source certificate management system as a PFX or PKCS#12 file

  • The password for the PKCS#12 file

Import a key and certificate

  1. Log on to the Key Management Service console.

  2. In the region drop-down list in the upper-left corner, select the region where your certificate is located.

  3. In the navigation pane on the left, click Certificates.

  4. Click Import Key and Certificate.

  5. In the Import Wrapped Key Material dialog box, enter the password for the PKCS#12 file, then upload or enter the PKCS#12 file.

  6. Click OK.

What's next

To manage export permissions or configure additional settings, see Create and download a certificate.