How to convert keys and certificates to PFX format

Code signing keys are usually issued by certificate authorities as .pvk and .spc files that contain your private key and certificate. The .pvk file is in a Microsoft proprietary format we cannot easily use and therefore must be converted using the Pvkimprt.exe Utility freely provided by Microsoft.

Use the following commands to convert them to the standard PKCS12 format (.pfx).

pvkimprt -PFX widgetsco.spc widgetsco.pvk

After the succession of dialogs shown below you will end up with a file called widgetsco.spc. Make sure you select the options shown.

First, enter the password you chose when you created your code signing private key.

Nothing to do here, just click Next.

Export the private key.

Include all certificates and use strong encryption.

You'll likely want to use the same password used earlier for your private key.

Specify your company name.

Click finish.

At this point we now have a usable PKCS12 file (widgetsco.pfx) that contains both your private key and certificate.