Home All Groups Group Topic Archive Search About

what would disable certificate export?

Author
16 Mar 2005 9:42 PM
nicole
I have several certificates in my user store. When I inspect them with
MMC snap-in, I can see that I have the private keys. When I try to
export them, it doesn't let me export private keys. I am pretty sure
that private keys are marked exportable when I first got these
certificates. I wrote a c# program to export the certificates but when
I run that, it gives me "key not valid for use in spefcified state"
error. If it matters, OS is XP Professional. Do you know how I can
export my certs?

Thanks.

Author
18 Mar 2005 1:26 PM
David Cross [MS]
If the keys were not set with the exportable flag, you cannot export them.
You would have to manually (programatically) decrypt the raw protected key
blobs and re-construct the PKCS #12.

--
David B. Cross [MS]
--
This posting is provided "AS IS" with no warranties, and confers no rights.


Top Whitepapers:

Auto-enrollment whitepaper:
http://www.microsoft.com/technet/prodtechnol/windowsserver2003/technologies/security/autoenro.mspx

Best Practices for implementing Windows Server 2003 PKI:
http://www.microsoft.com/technet/prodtechnol/windowsserver2003/technologies/security/ws3pkibp.mspx

Troubleshooting Certificate Status and Revocation whitepaper:
http://www.microsoft.com/technet/security/topics/crypto/tshtcrl.mspx

Windows Server 2003 web enrollment and troubleshooting guide:
http://www.microsoft.com/technet/prodtechnol/windowsserver2003/technologies/security/webenroll.mspx
Show quoteHide quote
"nicole" <nicoleflynn2***@yahoo.com> wrote in message
news:1111009362.369080.78550@o13g2000cwo.googlegroups.com...
>
> I have several certificates in my user store. When I inspect them with
> MMC snap-in, I can see that I have the private keys. When I try to
> export them, it doesn't let me export private keys. I am pretty sure
> that private keys are marked exportable when I first got these
> certificates. I wrote a c# program to export the certificates but when
> I run that, it gives me "key not valid for use in spefcified state"
> error. If it matters, OS is XP Professional. Do you know how I can
> export my certs?
>
> Thanks.
>