You are currently offline, waiting for your internet to reconnect

IIS: Export Private Key Option is Grayed When Exporting a Server Certificate

This article was previously published under Q232154
SYMPTOMS
Using the Certificates snap-in in Microsoft Windows 2000 and later, you can do many tasks regarding certificates and certificate management. One of these tasks is exporting server certificates for use in an Internet Information Services (IIS) versions 5.0 and later Web server. In order for a server certificate to be used by the web server, you must export the private key along with the certificate. Without the private key, data encryption (and therefore secure communications) is not possible.

When exporting the server certificate from the server's personal certificate store, you may not have the option to export the private key. If this is the case, when the certificate was imported, the option to allow the private key to be exported may have been unchecked. This is a security measure to prevent a possible compromise of the server's private key. Since this could be a potential security risk, the option to mark the private key as exportable is not checked by default.
RESOLUTION
In order to correct this problem, you will need access to the original certificate backup (.pfx) file. To ensure this problem does not happen in the future (should you want to export the private key again) make sure during the import process that you select the box "mark the private key as exportable."
MORE INFORMATION
For additional information about importing server certificates, click the article number below to view the article in the Microsoft Knowledge Base:
232137 HOW TO: Import a Server Certificate in Internet Information Services 5.0
For additional information about exporting (backing up) server certificates, click the article number below to view the article in the Microsoft Knowledge Base:
232136 HOW TO: Back Up a Server Certificate in Internet Information Services 5.0
iis 5 iis5 iis 6 iis 6.0 iis6
Properties

Article ID: 232154 - Last Review: 12/03/2007 21:24:39 - Revision: 2.6

Microsoft Internet Information Services 5.0, Microsoft Internet Information Services 6.0, Microsoft Internet Information Services 7.0

  • kbpending kbprb KB232154
Feedback
>/script> https://c.microsoft.com/ms.js"> amp;did=1&t=">/html> var varAutoFirePV = 1; var varClickTracking = 1; var varCustomerTracking = 1; var Route = "76500"; var Ctrl = ""; document.write(" "; document.write(" DI=4050&did=1&t=">