Can't export an Exchange 2007 certificate
We purchased a 3rd party SSl certificate and successfully imported it onto the CAS server where we generated the CSR. What we're trying to do now is export that certificate so that I can import it onto our 2nd CAS server. I ran the following command:
Export-ExchangeCertificate -Thumbprint "included our thumbprint" -BinaryEncodedtrue -Path c:\certs\export.pfx -PasswordGet-Credential).password
I put in a username and password but I'm getting the following error message:
Export-ExchangeCertificate : Cannot gain access to the private key or it is notexportable, and as a result cannot export as PKCS-12.Parameter name: ThumbprintAt line:1 char:27
Has anyone seen this before? I need to install this cert on the other CAS server as well as our ISA server
July 1st, 2008 7:06pm
Most CA charge you money when installing the same certificate on multiple boxes.
Have you tried to export certificate with the certificate MMC snap-in?
Free Windows Admin Tool Kit Click here and download it now
July 1st, 2008 9:52pm
Dear customer:
To proper assist you to troubleshoot the issue, please help collect the following information:
1. Send the thumbprint that you have assigned in the following command to the forum:
Export-ExchangeCertificate -Thumbprint "included our thumbprint" BinaryEncodedtrue -Path c:\certs\export.pfx PasswordGet-Credential).password
2. On the Exchange server 2007, run the following command and send the txt file to v-rocwan@microsoft.com for analyze.
Get-exchangecertificate thumbprint included our thumbprint | fl * >c:\cert.txt
3. Check whether the PrivateKeyExportable attribute of the certificate that you want to export is set to true.
When sending e-mail to me, please add the subject of the post that you have posted in the forum.
Thanks for your time and cooperation.
Rock Wang - MSFT
July 2nd, 2008 9:44am