Super User is a question and answer site for computer enthusiasts and power users. It's 100% free, no registration required.

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

I'm running Win2008R2, and have installed an Enterprise CA. I can create user certs, but no matter what I do, I cannot export the private key. I'm using the un-touched User certificate template, and the "allow export of private key" option is selected. Still, whenever I go to the "export" dialogue of the certificate (both as user and as administrator), I don't get asked if I want to export the private key, and the option to select PKCS12 format is grayed out. Any help is greatly appreciated!

share|improve this question
up vote 0 down vote accepted

Make sure you have the associated private key.

Double-click on the certificate entry, make sure it shows "You have a private key that corresponds to this certificate" at the bottom.

Certificate properties

share|improve this answer
good point! i actually don't. just wonder why -- i requested cert through MMC cert snap-in. after approving the request in the ca, the cert is in certificates/activedirectoryuserobject. but no private key. how do i get a cert with private key? – andreas-h Jan 24 '12 at 16:01
accepting this as it actually answers my question. doesn't really help, though, as long as I cannot create a certificate with a corresponding private key ... – andreas-h Sep 26 '12 at 7:14

I'm not completely sure, but I believe, that the export of private keys only works for keys that have been imported into the system and not for those which have been created inside of it.

share|improve this answer
Not necessarily. As long as the private key is marked as "exportable", it can be exported. – grawity Jan 24 '12 at 11:20

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.