Certificates are unusable when you import a PFX file to a computer that is running Windows Vista or Windows Server 2008

Article ID: 970730 - View products that this article applies to.
Expand all | Collapse all

On This Page

SYMPTOMS

Consider the following scenario:
  • You have a Personal Information Exchange (.pfx) file that contains certificates and private key information.
  • The private key information contains the cryptographic service provider (CSP) name.
  • The CSP name in the .pfx file does not match the case of the registered CSP name.
In this scenario, after you import the .pfx file to a computer that is running Windows Vista or Windows Server 2008, the operating system cannot use the certificate correctly. When an application tries to use a certificate that is included in the .pfx file, error code 0x80090014 is returned to the application.
Back to the top | Give Feedback

CAUSE

This issue occurs because Windows Vista and Windows Server 2008 assume that the CSP name in the .pfx file is a Cryptography Next Generation (CNG) provider. However, this assumption is not true. Therefore, the private key is imported incorrectly and the certificate is unusable.
Back to the top | Give Feedback

RESOLUTION

Hotfix information

A supported hotfix is available from Microsoft. However, this hotfix is intended to correct only the problem that is described in this article. Apply this hotfix only to systems that are experiencing the problem described in this article. This hotfix might receive additional testing. Therefore, if you are not severely affected by this problem, we recommend that you wait for the next software update that contains this hotfix.

If the hotfix is available for download, there is a "Hotfix download available" section at the top of this Knowledge Base article. If this section does not appear, contact Microsoft Customer Service and Support to obtain the hotfix.

Note If additional issues occur or if any troubleshooting is required, you might have to create a separate service request. The usual support costs will apply to additional support questions and issues that do not qualify for this specific hotfix. For a complete list of Microsoft Customer Service and Support telephone numbers or to create a separate service request, visit the following Microsoft Web site:
http://support.microsoft.com/contactus/?ws=support
(http://support.microsoft.com/contactus/?ws=support)
Note The "Hotfix download available" form displays the languages for which the hotfix is available. If you do not see your language, it is because a hotfix is not available for that language.

Important Windows Vista and Windows Server 2008 hotfixes are included in the same packages. However, only one of these products may be listed on the “Hotfix Request” page. To request the hotfix package that applies to both Windows Vista and Windows Server 2008, just select the product that is listed on the page.

Prerequisites

To apply this hotfix, the computer must run one of the following:
  • Windows Vista Service Pack 1
  • Windows Vista Service Pack 2
  • Windows Server 2008
  • Windows Server 2008 Service Pack 2

Restart requirement

You must restart the computer after you apply this hotfix.

Hotfix replacement information

This hotfix does not replace any other previously released hotfixes.

File information

The English version of this hotfix has the file attributes (or later file attributes) that are listed in the following table. The dates and times for these files are listed in Coordinated Universal Time (UTC). When you view the file information, it is converted to local time. To find the difference between UTC and local time, use the Time Zone tab in the Date and Time item in Control Panel.

Windows Server 2008 and Windows Vista file information note


The MANIFEST files (.manifest) and the MUM files (.mum) that are installed for each environment are listed separatelyMUM and MANIFEST files, and the associated security catalog (.cat) files, are critical to maintaining the state of the updated component. The security catalog files (attributes not listed) are signed with a Microsoft digital signature.
For all supported x86-based versions of Windows Server 2008 and Windows Vista
Collapse this tableExpand this table
File nameFile versionFile sizeDateTimePlatform
Crypt32.dll6.0.6001.22428978,43208-May-200913:10x86
Crypt32.dll6.0.6002.22131978,43208-May-200913:03x86
For all supported Itanium-based versions of Windows Server 2008
Collapse this tableExpand this table
File nameFile versionFile sizeDateTimePlatform
Crypt32.dll6.0.6001.224282,373,63208-May-200914:19IA-64
Crypt32.dll6.0.6002.221312,373,63208-May-200912:45IA-64
For all supported x64-based versions of Windows Server 2008 and Windows Vista
Collapse this tableExpand this table
File nameFile versionFile sizeDateTimePlatform
Crypt32.dll6.0.6001.224281,255,93608-May-200913:25x64
Crypt32.dll6.0.6002.221311,259,52008-May-200912:54x64
Back to the top | Give Feedback

STATUS

Microsoft has confirmed that this is a problem in the Microsoft products that are listed in the "Applies to" section.
Back to the top | Give Feedback

MORE INFORMATION

For more information, click the following article number to view the article in the Microsoft Knowledge Base:
824684
(http://support.microsoft.com/kb/824684/ )
Description of the standard terminology that is used to describe Microsoft software updates

Additional file information for Windows Server 2008 and Windows Vista

Additional files for all supported x86-based versions of Windows Server 2008 and Windows Vista
Additional files for all supported Itanium-based versions of Windows Server 2008
Collapse this tableExpand this table
File namePackage_for_kb970730_client_1~31bf3856ad364e35~x86~~6.0.1.0.mum
File versionNot Applicable
File size1,367
Date (UTC)10-May-2009
Time (UTC)06:44
PlatformNot Applicable
File namePackage_for_kb970730_client_2~31bf3856ad364e35~x86~~6.0.1.0.mum
File versionNot Applicable
File size1,694
Date (UTC)10-May-2009
Time (UTC)06:44
PlatformNot Applicable
File namePackage_for_kb970730_client~31bf3856ad364e35~x86~~6.0.1.0.mum
File versionNot Applicable
File size1,713
Date (UTC)10-May-2009
Time (UTC)06:44
PlatformNot Applicable
File namePackage_for_kb970730_sc_0~31bf3856ad364e35~x86~~6.0.1.0.mum
File versionNot Applicable
File size1,421
Date (UTC)10-May-2009
Time (UTC)06:44
PlatformNot Applicable
File namePackage_for_kb970730_sc_1~31bf3856ad364e35~x86~~6.0.1.0.mum
File versionNot Applicable
File size1,690
Date (UTC)10-May-2009
Time (UTC)06:44
PlatformNot Applicable
File namePackage_for_kb970730_sc~31bf3856ad364e35~x86~~6.0.1.0.mum
File versionNot Applicable
File size1,701
Date (UTC)10-May-2009
Time (UTC)06:44
PlatformNot Applicable
File namePackage_for_kb970730_server_0~31bf3856ad364e35~x86~~6.0.1.0.mum
File versionNot Applicable
File size1,425
Date (UTC)10-May-2009
Time (UTC)06:44
PlatformNot Applicable
File namePackage_for_kb970730_server_1~31bf3856ad364e35~x86~~6.0.1.0.mum
File versionNot Applicable
File size1,694
Date (UTC)10-May-2009
Time (UTC)06:44
PlatformNot Applicable
File namePackage_for_kb970730_server~31bf3856ad364e35~x86~~6.0.1.0.mum
File versionNot Applicable
File size1,713
Date (UTC)10-May-2009
Time (UTC)06:44
PlatformNot Applicable
File namePackage_for_kb970730_winpesrv_0~31bf3856ad364e35~x86~~6.0.1.0.mum
File versionNot Applicable
File size1,422
Date (UTC)10-May-2009
Time (UTC)06:44
PlatformNot Applicable
File namePackage_for_kb970730_winpesrv~31bf3856ad364e35~x86~~6.0.1.0.mum
File versionNot Applicable
File size1,430
Date (UTC)10-May-2009
Time (UTC)06:44
PlatformNot Applicable
File nameX86_215db288c398fc3b81eb4976363562fa_31bf3856ad364e35_6.0.6001.22428_none_03be507f09bfd1c3.manifest
File versionNot Applicable
File size699
Date (UTC)10-May-2009
Time (UTC)06:44
PlatformNot Applicable
File nameX86_aaffb0eb80da75c3c2b6a65f0cb001fa_31bf3856ad364e35_6.0.6002.22131_none_ef5d8806f39b8632.manifest
File versionNot Applicable
File size699
Date (UTC)10-May-2009
Time (UTC)06:44
PlatformNot Applicable
File nameX86_microsoft-windows-crypt32-dll_31bf3856ad364e35_6.0.6001.22428_none_5bebc6d0f6fa60b3.manifest
File versionNot Applicable
File size7,228
Date (UTC)08-May-2009
Time (UTC)16:56
PlatformNot Applicable
File nameX86_microsoft-windows-crypt32-dll_31bf3856ad364e35_6.0.6002.22131_none_5dc066c6f42f2067.manifest
File versionNot Applicable
File size7,228
Date (UTC)08-May-2009
Time (UTC)16:57
PlatformNot Applicable
Additional files for all supported x64-based versions of Windows Server 2008 and Windows Vista
Collapse this tableExpand this table
File nameAmd64_4fa9440a54595bd9c8fadb2407384f80_31bf3856ad364e35_6.0.6002.22131_none_19f7abc1a7fb0292.manifest
File versionNot Applicable
File size1,046
Date (UTC)10-May-2009
Time (UTC)06:44
PlatformNot Applicable
File nameAmd64_e5b09417d399c6f3887af94dac558467_31bf3856ad364e35_6.0.6001.22428_none_83e7a754b2b2d2c2.manifest
File versionNot Applicable
File size1,046
Date (UTC)10-May-2009
Time (UTC)06:44
PlatformNot Applicable
File nameAmd64_ff497db928e11a00ff7130e1d048e7aa_31bf3856ad364e35_6.0.6001.22428_none_64fe337bfaf2f408.manifest
File versionNot Applicable
File size703
Date (UTC)10-May-2009
Time (UTC)06:44
PlatformNot Applicable
File nameAmd64_microsoft-windows-crypt32-dll_31bf3856ad364e35_6.0.6001.22428_none_b80a6254af57d1e9.manifest
File versionNot Applicable
File size7,258
Date (UTC)08-May-2009
Time (UTC)16:56
PlatformNot Applicable
File nameAmd64_microsoft-windows-crypt32-dll_31bf3856ad364e35_6.0.6002.22131_none_b9df024aac8c919d.manifest
File versionNot Applicable
File size7,258
Date (UTC)08-May-2009
Time (UTC)17:02
PlatformNot Applicable
File namePackage_for_kb970730_client_1~31bf3856ad364e35~amd64~~6.0.1.0.mum
File versionNot Applicable
File size1,375
Date (UTC)10-May-2009
Time (UTC)06:44
PlatformNot Applicable
File namePackage_for_kb970730_client_2~31bf3856ad364e35~amd64~~6.0.1.0.mum
File versionNot Applicable
File size1,706
Date (UTC)10-May-2009
Time (UTC)06:44
PlatformNot Applicable
File namePackage_for_kb970730_client~31bf3856ad364e35~amd64~~6.0.1.0.mum
File versionNot Applicable
File size1,723
Date (UTC)10-May-2009
Time (UTC)06:44
PlatformNot Applicable
File namePackage_for_kb970730_sc_0~31bf3856ad364e35~amd64~~6.0.1.0.mum
File versionNot Applicable
File size1,429
Date (UTC)10-May-2009
Time (UTC)06:44
PlatformNot Applicable
File namePackage_for_kb970730_sc_1~31bf3856ad364e35~amd64~~6.0.1.0.mum
File versionNot Applicable
File size1,702
Date (UTC)10-May-2009
Time (UTC)06:44
PlatformNot Applicable
File namePackage_for_kb970730_sc~31bf3856ad364e35~amd64~~6.0.1.0.mum
File versionNot Applicable
File size1,711
Date (UTC)10-May-2009
Time (UTC)06:44
PlatformNot Applicable
File namePackage_for_kb970730_server_0~31bf3856ad364e35~amd64~~6.0.1.0.mum
File versionNot Applicable
File size1,433
Date (UTC)10-May-2009
Time (UTC)06:44
PlatformNot Applicable
File namePackage_for_kb970730_server_1~31bf3856ad364e35~amd64~~6.0.1.0.mum
File versionNot Applicable
File size1,706
Date (UTC)10-May-2009
Time (UTC)06:44
PlatformNot Applicable
File namePackage_for_kb970730_server~31bf3856ad364e35~amd64~~6.0.1.0.mum
File versionNot Applicable
File size1,723
Date (UTC)10-May-2009
Time (UTC)06:44
PlatformNot Applicable
File namePackage_for_kb970730_winpesrv_0~31bf3856ad364e35~amd64~~6.0.1.0.mum
File versionNot Applicable
File size1,430
Date (UTC)10-May-2009
Time (UTC)06:44
PlatformNot Applicable
File namePackage_for_kb970730_winpesrv~31bf3856ad364e35~amd64~~6.0.1.0.mum
File versionNot Applicable
File size1,438
Date (UTC)10-May-2009
Time (UTC)06:44
PlatformNot Applicable
Back to the top | Give Feedback

Properties

Article ID: 970730 - Last Review: October 6, 2011 - Revision: 2.0
APPLIES TO
  • Windows Vista Enterprise 64-bit Edition
  • Windows Vista Home Basic 64-bit Edition
  • Windows Vista Home Premium 64-bit Edition
  • Windows Vista Ultimate 64-bit Edition
  • Windows Vista Business
  • Windows Vista Business 64-bit Edition
  • Windows Vista Enterprise
  • Windows Vista Home Basic
  • Windows Vista Home Premium
  • Windows Vista Ultimate
  • Windows Server 2008 for Itanium-Based Systems
  • Windows Server 2008 Datacenter
  • Windows Server 2008 Enterprise
  • Windows Server 2008 Standard
Keywords: 
kbautohotfix kbexpertiseadvanced kbfix kbsurveynew kbqfe KB970730
Back to the top | Give Feedback

Give Feedback

 
Back to the topBack to the top