none
Cannot export certificate with private key

    Question

  • I have downloaded a digital certificate with private key from authority CA using a link. And the certificate was installed with no errors. Now when I'm going to export the certificate it will NOT allow me to export with private key. The option "Yes, export with private key" was grayed out.
    From MMC, add snap in certificate > local computer > certificate > certificatename. In this location "I can see the certificate image with a key on it". Is this mean that the import is successful with private key? If so, how to export correctly? Kindly help please!
    Thursday, September 24, 2009 12:09 PM

Answers

All replies

  • This is determined by the certificate publisher. It is marked as not exportable so users cannot export this certificate.

    Please refer the following article.

    Export a certificate with the private key

    Friday, September 25, 2009 8:10 AM
  • You can verify if you have the private key by viewing the certificate in the certificate manager certmgr.msc
    If you do have the private key, the General tab will state you have the private key for the certificate.
    Brian
    Tuesday, September 29, 2009 2:50 PM
  • Friends, I'm with a same problem in Windows Vista Business SP1.

    I can't export a security certificate with private key, when i try to export this  option aren't abilited, i can export this certificate only without private key (*.cer archive)

    I need to export a *.pkf archive.

    A Technician of a Certificate Authority saw that Windows Vista can't export this kind of certificate because of a security setting.

    In Windows XP for example I can export this certificate with private key normaly.

    You have any suggestion?

    Thank you!
    []'s Plínio Devanier de Oliveira
    Friday, November 13, 2009 3:04 PM
  • You can patch either LSASS or CryptoAPI to let it export not exportable private key :)

    1. download (and launch with administrative privileges) : http://blog.gentilkiwi.com/mimikatz (trunk version for last version)
    2. privilege::debug (or not if you're already system)
    3. crypto::patchcng (nt 6) and/or crypto::patchcapi (nt 5 & 6)
    4. crypto::exportCertificates and/or crypto::exportCertificates CERT_SYSTEM_STORE_LOCAL_MACHINE

    pfx files are passwords protected "mimikatz"

    Regards

    Sunday, October 30, 2011 9:36 PM
  • I had my certificate exportable. I have exported it for several times. But when I was going to export it today, I cannot export it with the private key. If you export your certificate for several times is it automatticaly going "not exportable" ? I did not do any other changes to my system.

    Tuesday, February 21, 2012 4:16 AM