Entrust Certificate Services Support Knowledge Base
Audience: Administrator
Last Modified: 2007-04-13 14:03:26.0
TN 7105 - How do I create a CSR and Private key with the Export with MS Exchange 2007
Problem:
You have created a private key and CSR using the Exchange shell for a UCC type certificate. You have imported the Entrust UC Certificate and attempt to
export the keypair however, the private key is NOT exportable.
export the keypair however, the private key is NOT exportable.
Solution:
Please recreate your keypair and CSR using the below the switches below:
Example
New-ExchangeCertificate -GenerateRequest -SubjectName "c=US, o=Entrust Inc., cn=mail.entrust.com" -IncludeAcceptedDomains -DomainName mail1.entrust.com,mailsrvr,autodiscover.local.entrust.com -privatekeyexportable $true -Path c:\certificates\mail1.entrust.req
-privatekeyexportable $true -- Allows the private key to be backed up. Works on production software only.
cn= is your common name
-DomainName -- are the list of domains that you require
Affected Products:
- Entrust Certificate Services Cert Admin UCC SSL - 1 Year Version Not Applicable English Windows
- Entrust Certificate Services Cert Admin UCC SSL - 2 Year Version Not Applicable English Windows
- Entrust Certificate Services UCC Certificate - 1 and 2 year Version Not Applicable English Windows
- Entrust Certificate Services UCC SSL - 1 year Version Not Applicable English Windows
- Entrust Certificate Services UCC SSL - 2 year Version Not Applicable English Windows
![[Certification Authorities - Webtrust - Deloitte]](/images/cert_services/deloitte_seal_sm.jpg)