Re: Digital Certs

From: Brian Komar (bkomar_at_nospam.komarconsulting.com)
Date: 04/20/04


Date: Tue, 20 Apr 2004 11:56:44 -0500

In article <196401c426e3$b2a1db00$a501280a@phx.gbl>,
anonymous@discussions.microsoft.com says...
> Hi,
> I'm trying to export/import a digital cert from one pc to
> another but without success. I have Windows 2000 5.00.2195
> ervice Pack 4 (with IE 6.0) on the machine I'm trying to
> export from and Windows NT 4.00 (with IE 5.5)on the
> machine I'm trying to import on.
> I have tried all three formats (DER, Base-64, PCB) but to
> no avail. I seem to be able to export ok but cannot import
> the file into the Personal store area of the NT box.
> Cannot see cert after import action has been performed.
>
> What am I doing wrong ?
>
> Regards and thanks
> Pat
>
To import the certificate and its private key, you must include the
private key in the export and export to a PKCS #12 format (*.pfx). When
you import to the new computer, this will import the certificate and
private key for use as you require.

But...

The private key must be enabled for export, which was decided at the
time of acquiring the certificate, if this option is not available, you
will not be able to export/import this certificate

Brian



Relevant Pages

  • Re: How to Install certificate?
    ... Bob is right that security admins don't like export of private keys...many ... export/import process. ... The sample code does not enable export/import of the private key. ... 2000/2003 Certificate enrollment server. ...
    (microsoft.public.pocketpc.wireless)
  • Re: Digital Signature
    ... "Note In order to use a personal digital certificate to sign VBA ... your digital certificate must include a private key. ... when I attempt to export the digital cert using the MMC ...
    (microsoft.public.access.security)
  • RE: SIMple SSL question ??
    ... I believe your book is instructing you to keep the private key secure. ... you use the certificate request wizard in IIS to install the cert after it's ... the certificate that's just been installed. ... If an attacker retrievs the SSL certificate, ...
    (microsoft.public.dotnet.security)
  • RE: SIMple SSL question ??
    ... I believe your book is instructing you to keep the private key secure. ... you use the certificate request wizard in IIS to install the cert after it's ... the certificate that's just been installed. ... If an attacker retrievs the SSL certificate, ...
    (microsoft.public.dotnet.security)
  • Re: Certificates, Keys, Mobile Users, Intended Usage
    ... Option that you think about uses self signed EFS certificates. ... Better then exporting user's private key as backup is to setup DRA (Data ... there is no EFS certificate and it will generate a new one. ... Mobile computer users benefit from encrypting sensitive ...
    (microsoft.public.win2000.security)