Entrust Datacard

Entrust Certificate Services Support Knowledge Base

Last Modified: 2016-07-05 09:22:59.0

How do I create a CSR and Private key with the Export with MS Exchange 2007

Article Number: 46218

Problem:
 
You have created a private key and CSR using the Exchange shell for a UCC type certificate.  You have imported the Entrust UC Certificate and attempt to
export the keypair however, the private key is NOT exportable.
 
Solution:
 
Please recreate your keypair and CSR using the below the switches below:
 
Example

New-ExchangeCertificate -GenerateRequest -SubjectName "c=US, o=Entrust Inc., cn=mail.entrust.com" -IncludeAcceptedDomains -DomainName mail1.entrust.com,mailsrvr,autodiscover.local.entrust.com -privatekeyexportable $true -Path c:\certificates\mail1.entrust.req
 
-privatekeyexportable $true -- Allows the private key to be backed up. Works on production software only.

cn= is your common name
 
-DomainName -- are the list of domains that you require

TN7105

Affected Products:

  • Entrust Certificate Services Cert Admin UCC SSL - 1 Year Version Not Applicable English Windows
  • Entrust Certificate Services Cert Admin UCC SSL - 2 Year Version Not Applicable English Windows
  • Entrust Certificate Services UCC Certificate - 1 and 2 year Version Not Applicable English Windows
  • Entrust Certificate Services UCC SSL - 1 year Version Not Applicable English Windows
  • Entrust Certificate Services UCC SSL - 2 year Version Not Applicable English Windows