You will export two versions of the client certificate—one version without a private key, and one version with a private key. In this step you will export the client certificate without the private key (*.cer file) to use on the front-end Web servers. In step 4 you will export the client certificate with the private key (*.pfx file) to use on the index management servers.

Do the following on the computer from which you obtained the client certificate in the "Obtain a Client Certificate" step:

1. Start Microsoft Internet Explorer.
2. On the Tools menu, click Internet Options.
3. In the Internet Options dialog box, click the Content tab.
4. In the Certificates section, click Certificates.
5. In the Certificates dialog box, on the Personal tab, click the certificate you created in the "Obtain a Client Certificate" step, and then click Export.

    Note   The Issued To column for the certificate shows the name you specified as the descriptive name of the certificate in the "Obtain a Client Certificate" step.

6. In the Certificate Export Wizard, do the following:
   1. On the Welcome to the Certificate Export Wizard page, click Next.
   2. On the Export Private Key page, click No, do not export the private key, and then click Next.
   3. On the Export File Format page, click DER encoded binary X.509 (.CER), and then click Next.
   4. On the File to Export page, click Browse, navigate to a location for saving certificates on the local hard disk drive, specify a file name for the certificate, click Save, and then click Next.
   5. On the Completing the Certificate Export Wizard page, click Finish.
   6. In the message box that appears, click OK.
7. In the Certificates dialog box, click Close.
8. Click OK to close the Internet Options dialog box.