Jump to content

How to get an exportable client certificate?


Recommended Posts

Guest Ruud Uphoff
Posted

Hi,

 

I've the following problem when attempting to export a e-mail client

certificate.

 

“The associated private key is marked as not exportableâ€

 

This happens after installing the certificate regardless the authority.

I tried:

- Verisign: They don't know

- CaCert" tried to teach me the procedure I know already but does not work.

- Thawte They don't know

- Commodo: they don't know.

 

I'm not the only person having this problem, as "same problem here" is

the only and frequently response in forums of the authorities.

 

Is there, PLEASE, :-) someone who assumes nothing but just knows what is

the problem with Vista? (and a possible solution)

 

Kind Regards,

Ruud Uphoff

  • Replies 4
  • Created
  • Last Reply
Posted

Ruud Uphoff;684137 Wrote: <span style="color:blue">

> Hi,

>

> I've the following problem when attempting to export a e-mail client

> certificate.

>

> “The associated private key is marked as not exportableâ€

>

> This happens after installing the certificate regardless the authority.

> I tried:

> - Verisign: They don't know

> - CaCert" tried to teach me the procedure I know already but does not

> work.

> - Thawte They don't know

> - Commodo: they don't know.

>

> I'm not the only person having this problem, as "same problem here" is

> the only and frequently response in forums of the authorities.

>

> Is there, PLEASE, :-) someone who assumes nothing but just knows what

> is

> the problem with Vista? (and a possible solution)

>

> Kind Regards,

> Ruud Uphoff</span>

 

Ruud,

 

For email certificates, I can recommend Comodo. They do allow you to

create an exportable certificate. To get an exportable email

certification go to their website: 'Free Secure Email Certificates

Secure Email Certificate Email Security Digital Email Signatures'

(http://www.comodo.com/products/certificate...ertificate.html)

 

When you get into the screen where you enter your details, click

advanced options, and select make this certificate exportable.

 

If you've already got a certificate from comodo, then you'll have to

request that the existing one is revoked and ask them to issue you a new

one and use the advanced options on the sign up page.

 

Whether or not a digital certificate is exportable is not a function of

Vista. It is the responsibility of the certificate issuer.

 

Good luck!

 

 

--

.Joe

 

_[image:

http://uswave.net/vistax64/joetmvx64.png] (\"http://uswave.net/vistax64/joetmvx64.png\")_

_ ::Vista_Forums:: (\"http://www.vistax64.com/\")_

_Geekbench_Score:_4031 (\"http://browse.geekbench.ca/geekbench2/view/51273\")_

_CPU-Z (\"http://valid.x86-secret.com/show_oc.php?id=345866\")_

Guest Mark H
Posted

Only stating the obvious first... have you looked at:

http://windowshelp.microsoft.com/Windows/e...521033.mspx#EJC

 

Please note that it must be both Exported by the original computer and

Imported by the end computer.

 

 

Someone else's observation on diagnosing the problem:

http://www.tomshardware.com/forum/224739-4...rked-exportable

 

Is the private key actually associated with the certificate?

Example:

c:\certutil -repairstore MY 0

More detail:

http://technet2.microsoft.com/windowsserve...3.mspx?mfr=true

 

On the Import machine:

http://support.microsoft.com/kb/842210

 

Well... it's a starting point. Hope it helps.

 

 

 

 

"Ruud Uphoff" <vistanews@ruphoff.net> wrote in message

news:48048cea$0$14350$e4fe514c@news.xs4all.nl...<span style="color:blue">

> Hi,

>

> I've the following problem when attempting to export a e-mail client

> certificate.

>

> “The associated private key is marked as not exportableâ€

>

> This happens after installing the certificate regardless the authority.

> I tried:

> - Verisign: They don't know

> - CaCert" tried to teach me the procedure I know already but does not</span>

work.<span style="color:blue">

> - Thawte They don't know

> - Commodo: they don't know.

>

> I'm not the only person having this problem, as "same problem here" is

> the only and frequently response in forums of the authorities.

>

> Is there, PLEASE, :-) someone who assumes nothing but just knows what is

> the problem with Vista? (and a possible solution)

>

> Kind Regards,

> Ruud Uphoff</span>

Guest Brian Komar \(MVP\)
Posted

You need to mark the key as exportable when you generate the actual

certificate request.

For example, if you are using certreq.exe , you would designate the key as

exportable by adding the "Exportable = TRUE" line to the inf file.

Bottom line is you cannot make a key exportable after the fact

 

Brian

 

"Ruud Uphoff" <vistanews@ruphoff.net> wrote in message

news:48048cea$0$14350$e4fe514c@news.xs4all.nl...<span style="color:blue">

> Hi,

>

> I've the following problem when attempting to export a e-mail client

> certificate.

>

> “The associated private key is marked as not exportableâ€

>

> This happens after installing the certificate regardless the authority. I

> tried:

> - Verisign: They don't know

> - CaCert" tried to teach me the procedure I know already but does not

> work.

> - Thawte They don't know

> - Commodo: they don't know.

>

> I'm not the only person having this problem, as "same problem here" is the

> only and frequently response in forums of the authorities.

>

> Is there, PLEASE, :-) someone who assumes nothing but just knows what is

> the problem with Vista? (and a possible solution)

>

> Kind Regards,

> Ruud Uphoff </span>

Guest Ruud Uphoff
Posted

..Joe wrote:<span style="color:blue">

> Ruud Uphoff;684137 Wrote: <span style="color:green">

>> Hi,

>>

>> I've the following problem when attempting to export a e-mail client

>> certificate.

>>

>> “The associated private key is marked as not exportableâ€

>>

>> This happens after installing the certificate regardless the authority.

>> I tried:

>> - Verisign: They don't know

>> - CaCert" tried to teach me the procedure I know already but does not

>> work.

>> - Thawte They don't know

>> - Commodo: they don't know.

>>

>> I'm not the only person having this problem, as "same problem here" is

>> the only and frequently response in forums of the authorities.

>>

>> Is there, PLEASE, :-) someone who assumes nothing but just knows what

>> is

>> the problem with Vista? (and a possible solution)

>>

>> Kind Regards,

>> Ruud Uphoff</span>

>

> Ruud,

>

> For email certificates, I can recommend Comodo. They do allow you to

> create an exportable certificate. To get an exportable email

> certification go to their website: 'Free Secure Email Certificates

> Secure Email Certificate Email Security Digital Email Signatures'

> (http://www.comodo.com/products/certificate...ertificate.html)

>

> When you get into the screen where you enter your details, click

> advanced options, and select make this certificate exportable.

>

> If you've already got a certificate from comodo, then you'll have to

> request that the existing one is revoked and ask them to issue you a new

> one and use the advanced options on the sign up page.

>

> Whether or not a digital certificate is exportable is not a function of

> Vista. It is the responsibility of the certificate issuer.

>

> Good luck!

> </span>

 

Unfortunately, the cert of several issuers just don't work for Vista.

This was also the case with Comodo...

 

However, I followed your suggestion and... YEP! They replied within an

hour (great service!)telling me they have removed all my data. I tried

again and now it works! Thanks for your help!

 

Ruud

Join the conversation

You can post now and register later. If you have an account, sign in now to post with your account.

Guest
Reply to this topic...

×   Pasted as rich text.   Paste as plain text instead

  Only 75 emoji are allowed.

×   Your link has been automatically embedded.   Display as a link instead

×   Your previous content has been restored.   Clear editor

×   You cannot paste images directly. Upload or insert images from URL.


×
×
  • Create New...