Export a certificate with its private key (2024)

  • Article

If you already have a certificate installed on a Windows device and you want to install the same certificate on a Windows device that requires a private key, you can export the certificate with the private key. This article describes how to export a certificate from the Windows certificate stores of the local computer with the private key.

Prerequisites

Before you begin, you need:

  • A certificate installed with the private key to a certificate store of the local computer.

  • An Active Directory domain with an account that is a member of the Domain Admins or Enterprise Admins domain security group. For more information about using the appropriate accounts and group memberships, see Local and Domain Default Groups.

Export a certificate from the Windows certificate stores with the private key

To export a certificate from the Windows certificate stores with the private key:

  1. Open the certificate management console for the local computer by running the following command. Some methods of running this command are from the Start menu, the Windows Run prompt, PowerShell prompt, or command prompt.

    certlm.msc
  2. In the console tree, navigate to the certificate you want to export.

  3. Right-click the certificate, select All Tasks, and then select Export.

  4. On the screen Welcome to the Certificate Export Wizard, select Next.

  5. To export the private key, select Yes, export the private key, then select Next.

  6. For the file format, select Personal Information Exchange - PKCS #12 (.PFX). Check the box for Include all certificates in the certification path if possible, to include the whole certificate chain, then select Next.

  7. Check the box to enter and confirm a password to protect the private key, and select AES256-SHA256 for the encryption method, then select Next. It's important to guard the security of the private key.

  8. Enter or browse to the file path, then select Next.

  9. Review the summary, then select Finish.

Once the certificate is exported, you can import it to another device that requires the certificate with private key.

Related content

Export a certificate with its private key (2024)

FAQs

Export a certificate with its private key? ›

In the console tree, navigate to the certificate you want to export. Right-click the certificate, select All Tasks, and then select Export. On the screen Welcome to the Certificate Export Wizard, select Next. To export the private key, select Yes, export the private key, then select Next.

How to Export certificate with private key online? ›

On your Windows Server, download and save the. Run the DigiCert® Certificate Utility for Windows (double-click. In the Certificate Export wizard, select Yes, export the private key, select pfx file, and then check Include all certificates in the certification path if possible, and finally, select Next.

How do I Export a certificate from Chrome with a private key? ›

Click on the button “Certificates” and be in the tab marked “Personal”. Select your certificate and click on “Export”. Then click “Next”. Be sure to select “Yes, export the private key” and click “Next”.

How to Export certificate with private key iOS? ›

Using a Mac with the distribution certificate installed:
  1. Open Keychain Access (Application -> Utilities)
  2. Click on My Certificates.
  3. Find the certificate, it'll be named iPhone Distribution: Your Company Name.
  4. Expand the certificate using the Reveal More arrow.
  5. Select both the certificate and the private key.

How to Export certificate with private key from IIS? ›

In the center pane, right-click on the certificate that you want to export/back up and then click All Tasks > Export. In the Certificate Export Wizard, on the Welcome to the Certificate Export Wizard page, click Next. On the Export Private Key page, select Yes, export the private key, and then, click Next.

Can you Export a certificate with private key? ›

If you already have a certificate installed on a Windows device and you want to install the same certificate on a Windows device that requires a private key, you can export the certificate with the private key.

How do I download a private key for SSL certificate? ›

Locating a private key in Windows
  1. Open Microsoft Management Console.
  2. In the Console Root, expand Certificates (Local Computer)
  3. Locate the certificate in the Personal or Web Server folder.
  4. Right click the certificate.
  5. Select Export.
  6. Follow the guided wizard.
Aug 19, 2022

How do I import a private key into a certificate? ›

On the Private key protection page, enter password in the Password box and click on Next. On the Certificate Store page, select Place all certificates in the following store, click Browse and choose Personal before clicking OK to close the selection dialogue, then clicking Next. Click Finish.

Can we generate private key from SSL certificate? ›

A Certificate Signing Request (CSR) and a private key can be generated using a CSR generator tool, a software application allowing you to create a CSR and a private key for an SSL/TLS certificate.

Does a certificate file contain the private key? ›

Public key is embedded in the SSL certificate and Private key is stored on the server and kept secret. When a site visitor fills out a form with personal information and submits it to the server, the information gets encrypted with the public key to protect if from eavesdropping.

How do I export certificates from my iPhone? ›

Exporting iOS code signing certificates manually
  1. Start Keychain Access.
  2. On the top left sidebar select login and on the bottom left select My Certificates .
  3. This will list all your installed certificates and the associated private key.
  4. Select the one that you would like to export and choose Export from the pop-up menu.

How to export a certificate from Keychain? ›

Export keychain items
  1. In the Keychain Access app on your Mac, select the items you want to export in the Keychain Access window.
  2. Choose File > Export Items. ...
  3. Select a location to save your keychain items, click the File Format pop-up menu, then choose a file type.
  4. Click Save.
  5. Enter a password.

How do I export a DigiCert certificate with a private key? ›

Exporting a Certificate from a Microsoft Server Platform

Download and run the DigiCert Certificate Management Tool on the Microsoft server. In the Certificate Export wizard, select Yes, export the private key, select pfx file, check Include all certificates in the certification path if possible, and then, click Next.

How to export private key from certificate keystore explorer? ›

Export a Key Pair's Private Key as OpenSSL

Right-click on the Key Pair entry in the KeyStore Entries table. Select the Export sub-menu from the pop-up menu and from there choose Export Private Key. If required the Unlock Entry dialog will be displayed. Enter the Key Pair entry's password and press the OK button.

How do I export private key and public key from keystore? ›

How to export private key and public key from keystore
  1. Export the private key from pkcs12 format keystore.
  2. openssl pkcs12 -in keystore_name.p12 -nodes -nocerts -out private.key.
  3. Export the public certificate from pkcs12 format keystore.
  4. openssl pkcs12 -in keystore_name.p12 -nokeys -out public-cert-file.

How to Export adfs certificate with private key? ›

Step 2. Export the Certificate from AD FS
  1. Log in to the AD FS Management Console.
  2. Expand the. Service. ...
  3. Right-click the certificate under Token-signing in the Certificates pane, and then select. View Certificate. ...
  4. Click the. Details. ...
  5. Select. ...
  6. Click. ...
  7. Enter the certificate file name and the location to export it to, and click. ...
  8. Click.

How do I Export my private key from GPA? ›

To export your private PGP key
  1. Select the GnuPG keys keyring from the left side panel.
  2. Select the Personal PGP key that has to be exported, from the list.
  3. Right click on the selected key and select Properties ▸ Details.
  4. Press the Export button.
  5. Choose a location for your keyfile, and press Export to finish.

Top Articles
Latest Posts
Article information

Author: Margart Wisoky

Last Updated:

Views: 6287

Rating: 4.8 / 5 (78 voted)

Reviews: 85% of readers found this page helpful

Author information

Name: Margart Wisoky

Birthday: 1993-05-13

Address: 2113 Abernathy Knoll, New Tamerafurt, CT 66893-2169

Phone: +25815234346805

Job: Central Developer

Hobby: Machining, Pottery, Rafting, Cosplaying, Jogging, Taekwondo, Scouting

Introduction: My name is Margart Wisoky, I am a gorgeous, shiny, successful, beautiful, adventurous, excited, pleasant person who loves writing and wants to share my knowledge and understanding with you.