ADCS - I have problem with export private key .pfx and date of expiron certificate

Question

question

drClays asked Mar 31, '22 GaryReynolds edited Apr 5, '22

ADCS - I have problem with export private key .pfx and date of expiron certificate

Hello,

I made new certification templates for certificate request, but if I have checked "Allow private key to be exported" I can not export this cert with private key. And I have set "Validity period" at 5 years, but they generate validation at 2 years.

What am I doing wrong?

This is how it looks:

windows-server-security

2022-03-31-14h28-09.png (189.0 KiB)

2022-03-31-14h28-18.png (215.9 KiB)

2022-03-31-14h28-33.png (148.4 KiB)

2022-03-31-14h29-13.png (200.6 KiB)

5 |1600 characters needed characters left characters exceeded

Attachments: Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

Answer 1 · 2022-03-31T18:41:03.44Z

GaryReynolds answered Mar 31, '22 GaryReynolds edited Apr 5, '22

Hi

I can't see the bottom of the certificate dialog, but it doesn't look like the private key is available. The dialog should show a key below the date if the private key is present.

The validity duration in the template is only honoured if the issuing CA has an expiry date greater than the template duration, i think it's double. It's likely that the issuing CA certificate has less than 5 years remaining.

Gary.

· 7

5 |1600 characters needed characters left characters exceeded

Attachments: Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

drClays · Apr 01 at 07:56 AM

Hi,

on certificate dialog, there are not more information.

What can I do to get private key?

0 ·

GaryReynolds drClays · Apr 01 at 09:25 AM

You will need to open the certificate from the store where the private key is stored to see the private key.

Gary.

0 ·

drClays GaryReynolds · Apr 01 at 11:12 AM

I generate csr from Fortigate:

Next, I request certificate via htttps://localhost/certsrv

In the next step I import this .cer to Certificates>Personal and I try to export with private key, but it's not enabled.

0 ·

image.png (321.4 KiB)

image.png (320.6 KiB)

image.png (362.9 KiB)

Show more comments

question