Super User is a question and answer site for computer enthusiasts and power users. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

I'm running Win2008R2, and have installed an Enterprise CA. I can create user certs, but no matter what I do, I cannot export the private key. I'm using the un-touched User certificate template, and the "allow export of private key" option is selected. Still, whenever I go to the "export" dialogue of the certificate (both as user and as administrator), I don't get asked if I want to export the private key, and the option to select PKCS12 format is grayed out. Any help is greatly appreciated!

share|improve this question
up vote 0 down vote accepted

Make sure you have the associated private key.

Double-click on the certificate entry, make sure it shows "You have a private key that corresponds to this certificate" at the bottom.

Certificate properties

share|improve this answer
good point! i actually don't. just wonder why -- i requested cert through MMC cert snap-in. after approving the request in the ca, the cert is in certificates/activedirectoryuserobject. but no private key. how do i get a cert with private key? – andreas-h Jan 24 '12 at 16:01
accepting this as it actually answers my question. doesn't really help, though, as long as I cannot create a certificate with a corresponding private key ... – andreas-h Sep 26 '12 at 7:14

I'm not completely sure, but I believe, that the export of private keys only works for keys that have been imported into the system and not for those which have been created inside of it.

share|improve this answer
Not necessarily. As long as the private key is marked as "exportable", it can be exported. – grawity Jan 24 '12 at 11:20

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .