Note To Self » security http://www.hawksley.net John Hawksley | www.hawksley.net Sun, 30 May 2010 14:13:46 +0000 en hourly 1 http://wordpress.org/?v=abc Exporting “Non-Exportable” Private Keys from Vista http://www.hawksley.net/2009/03/exporting-non-exportable-private-keys-from-vista/ http://www.hawksley.net/2009/03/exporting-non-exportable-private-keys-from-vista/#comments Fri, 06 Mar 2009 09:06:37 +0000 John http://www.hawksley.net/?p=91 Going through the Thawte sign-up process to get a code signing certificate, I noticed that the certificate signing request (CSR) generated by Vista has the “Yes, export the private key” option grayed out.  I’m surmising that Vista marks all keys (at least those for code signing certificates) as not exportable.

This is obviously bad when you have more than a single developer who must sign code.  After beginning the process I found an article at Thawte which says ‘don’t do this on Vista!’, but I also found the Jailbreak util from iSec.  This was able to export the private key with the CSR into a PFX file.  As a test I also re-imported it from the export file and that worked fine.

Share/Bookmark

]]> http://www.hawksley.net/2009/03/exporting-non-exportable-private-keys-from-vista/feed/ 0