up vote 0 down vote favorite
share [g+] share [fb]

I'm running Win2008R2, and have installed an Enterprise CA. I can create user certs, but no matter what I do, I cannot export the private key. I'm using the un-touched User certificate template, and the "allow export of private key" option is selected. Still, whenever I go to the "export" dialogue of the certificate (both as user and as administrator), I don't get asked if I want to export the private key, and the option to select PKCS12 format is grayed out. Any help is greatly appreciated!

link|improve this question
feedback

2 Answers

up vote 0 down vote

I'm not completely sure, but I believe, that the export of private keys only works for keys that have been imported into the system and not for those which have been created inside of it.

link|improve this answer
Not necessarily. As long as the private key is marked as "exportable", it can be exported. – grawity Jan 24 at 11:20
feedback
up vote 0 down vote

Make sure you have the associated private key.

Double-click on the certificate entry, make sure it shows "You have a private key that corresponds to this certificate" at the bottom.

Certificate properties

link|improve this answer
good point! i actually don't. just wonder why -- i requested cert through MMC cert snap-in. after approving the request in the ca, the cert is in certificates/activedirectoryuserobject. but no private key. how do i get a cert with private key? – andreas-h Jan 24 at 16:01
feedback

Your Answer

 
or
required, but never shown
discard

Not the answer you're looking for? Browse other questions tagged or ask your own question.