Windows 2008 Unable to export private key (.pfx) after installing new cert on IIS 7

In order to get the Private Key associated with certificate, we need to follow the steps below on the Server where the CSR file was requested. 

  1.  Open the Certificate console (MMC > Certificates).
  2. Go to your certificate and click the Details tab and copy the Serial Number.
  3. On the Server, where the CSR file was generated, run the following command

Certutil –repairstore my "serial number of the Certificate"

For Example: 

Certutil –repairstore my “14 b9 7f f5 00 02 00 00 00 22” 

Now you should be able to export your certificate as a .pfx file which includes the private key. 

Was this answer helpful? 0 Users Found This Useful (0 Votes)