Hi All, I did a search for this and came up with a few hits, but nothing that resolves my issue. I have a Windows 2008 R2 Enterprise Certificate Authority. I have Web Enrollment turned on on an issuing Certificate Authority. I need to export private keys to make a .pfx file when making an advacned certificate request, but the option to "Mark keys as exportable" is greyed out. How do I make this option available? Thanks!

The certificate template must enable Private Key Export My guess is that the certificate template you are requesting disables private key export, hence the disabled control Brian

Thanks, Brian. That, indeed, is the case. I'm just having trouble defining just exactly what template the client is needing at this point, but that's another issue, altogether. Thanks!