|
I get pfx file with private key(it was imported from other Windows and button "export private keys" was pressed). I install it. Get message that import was succefull. When I see them in certmgr I see message "a system level error occurred while verifying trust" and no valid private key with certificate. Also this certificate has "This certificate has an invalid digital signature." status. What can be possible reason? | ||||
|
feedback
|
|
"verifying trust" could imply cert chain could not be validated due to an invalid signature (like signature inside cert from issuer) It could simply referring to the signature from the issuing CA within the certificate itself could not be validated. (Perhaps CA was revoked or CA keys may have expired and keys were renewed - but CA's CN/DN remained the same) To check if privatekey issue as you suspect, you could export cert alone and import cert without private key and see if it still indicates invalid signature - or if the certificate signature could not be validated. I'd check that the issuing CA chains up to a trusted root cert in LocalMachine|Trust store and all intermediate CA certs are present (Trust or CertificateAuthority store) and that all certs are valid and that your cert's AKI matches the issuing CA's SKI. | |||
|
feedback
|
