How to enable private key with certificate while exporting

Umesh Vangapalli 1 Reputation point
2023-01-25T04:40:36.1466667+00:00

Hi,

I have a certificate within the Azure Key Vault, there was no option of selecting private key when downloading the certificate.

I tried to create a password with Certificate Export Wizard, I don't see an option to enable below.

User's image

Azure Key Vault
Azure Key Vault
An Azure service that is used to manage and protect cryptographic keys and other secrets used by cloud apps and services.
1,098 questions
Windows Server Security
Windows Server Security
Windows Server: A family of Microsoft server operating systems that support enterprise-level management, data storage, applications, and communications.Security: The precautions taken to guard against crime, attack, sabotage, espionage, or another threat.
1,714 questions

1 answer

Sort by: Most helpful
Most helpful Newest Oldest
  1. Silvia Wibowo 2,851 Reputation points Microsoft Employee
    2023-01-25T05:14:25.9133333+00:00

    Hi @Umesh Vangapalli , Azure Key Vaults creates exportable or non-exportable certificate, depending on the policy:

    • The policy that's used to create the certificate must indicate that the key is exportable.
    • If the policy indicates that the key is non-exportable, then the private key isn't a part of the value when it's retrieved as a secret.

    On Certificate Export Wizard: The option "Yes, export the private key" will appear only if the private key is marked as exportable and you have access to the private key. More info:

    Either your private key is marked as non-exportable or you don't have access to the private key.

    Please accept an answer if correct. Original posters help the community find answers faster by identifying the correct answer. Here is how.