Re: Retrieving private key from key store to create pfx

From: Michel Gallant (neutron_at_NOSPAMistar.ca)
Date: 03/31/04 

Date: Tue, 30 Mar 2004 17:38:06 -0500

Ben,
When you receive your signed certificate from the issuing cert-server and import it via XEnroll
capability, your private key (generated automatically when you generated the PKCS #10 request)
will be linked to that cert in your cert store (via an certificate Extended Property).
To export the cert and private key to a PFX file, have a look at the PFX***** api, e.g.
http://msdn.microsoft.com/library/default.asp?url=/library/en-us/security/security/pfxexportcertstore.asp

Alternatively, CAPICOM makes export/import of PFX extremely easy.

-- Mitch Gallant
    MVP Security

"Ben SKolmoski" <benjiski@hotmail.com> wrote in message
news:8B93F7F5-AE4F-4E2B-A6EB-F70F08EA909E@microsoft.com...
> I am working on an app that will generate all certificate requests, retrieve the certificates and
then push the certificate the appropriate webserver. In order to push the certificates out without
having to generate the request on the individual web server I must create a pfx file. So I need
access to the private key. I am generating the certificate requests using XEnroll, when I get my
.cer file from the ca how to i find the private associated with that certificate, and how do I then
create the pfx file.
>
> Any help would be greatly appreciated.
>
> Ben

Relevant Pages

  • Re: Generate/Export PKCS #12 certificate from Win2k3 CA
    ... import/export the issuing CA certificate to the trusted root certificate ... Just clicking a .cer or .pfx file will ... When you export the private key you will need to use a password to protect ... authentication and if your VPN client is l2tp you probably need a "computer" ...
    (microsoft.public.windows.server.general)
  • Re: Generate/Export PKCS #12 certificate from Win2k3 CA
    ... import/export the issuing CA certificate to the trusted root certificate ... Just clicking a .cer or .pfx file will ... When you export the private key you will need to use a password to protect ... authentication and if your VPN client is l2tp you probably need a "computer" ...
    (microsoft.public.windows.server.security)
  • Re: Client Certificates
    ... I hope you are talking about exporting the pfx file on the CLIENT machine ... The way PKI certificate generation usually works is the following: ... - CA signs that information (i.e. encrypts the hash of that info with its own private key) ...
    (microsoft.public.security)
  • RE: SIMple SSL question ??
    ... I believe your book is instructing you to keep the private key secure. ... you use the certificate request wizard in IIS to install the cert after it's ... the certificate that's just been installed. ... If an attacker retrievs the SSL certificate, ...
    (microsoft.public.dotnet.security)
  • RE: SIMple SSL question ??
    ... I believe your book is instructing you to keep the private key secure. ... you use the certificate request wizard in IIS to install the cert after it's ... the certificate that's just been installed. ... If an attacker retrievs the SSL certificate, ...
    (microsoft.public.dotnet.security)