exporting key

27 Apr 2005 5:20 PM

alexk

Good day,
When creating a new certifcate requets via the IIS wizard, how the
corresponding private key can be exported to a file? The key surely
exists, since the cert viewer tells "you have a private key for this
certificate" - after the certifcate is approved. (And of course the key
exists, otherwise how an SSL session with my server could be ever
established ... )

Thank you, Alex.

27 Apr 2005 5:43 PM

Miha Pihler [MVP]

Hi Alex,

Once the certificate request is complete open MMC on the server where your
certificate is. Add Certificates Snap-In for Computer account
(http://freeweb.siol.net/mpihler/certcomputer.jpg) and follow the wizard.
Drill down under Personal -> Certificates
(http://freeweb.siol.net/mpihler/certmmc.jpg). Here locate the certificate
you want to export and right click on it. Select the export option and
follow the wizard. In the wizard select "Yes, export the private key"
(http://freeweb.siol.net/mpihler/exportpriv.jpg).

In the end you should have a file with .pfx extension (not a file with .cer
extension).

I hope this helps.

--
Mike
Microsoft MVP - Windows Security

Show quoteHide quote

"alexk" <al***@mailinator.com> wrote in message
news:1114618499.680663.181610@z14g2000cwz.googlegroups.com...
> Good day,
> When creating a new certifcate requets via the IIS wizard, how the
> corresponding private key can be exported to a file? The key surely
> exists, since the cert viewer tells "you have a private key for this
> certificate" - after the certifcate is approved. (And of course the key
> exists, otherwise how an SSL session with my server could be ever
> established ... )
>
> Thank you, Alex.
>

27 Apr 2005 6:01 PM

alexk

Thank you Mike, that'd worked!

It is probably OT here, but I've discovered that the exported files are
in PKCS #12 format. Does anyone have an idea how to move them to PKCS
#15 ?