"windows cannot back one or more private keys because the CSP does not support key export" while backing up CA database and private key...

hi all;

 

when want backup ca database , private key, following error message appears:

 

windows cannot 1 or more private keys because csp not support key export. want continue , backup private keys can exported?

 

i using windows server 2008 r2 enterprise , following output of running "certutil.exe –getreg ca\csp\*" command:

 

hkey_local_machine\system\currentcontrolset\services\certsvc\configuration\skicertificate\csp:

values:
  providertype             reg_dword = 1
  provider                 reg_sz = microsoft strong cryptographic provider
  hashalgorithm            reg_dword = 8004 (32772)
    calg_sha1
    algorithm class: 0x8000(4) alg_class_hash
    algorithm type: 0x0(0) alg_type_any
    algorithm sub-id: 0x4(4) alg_sid_sha1

  machinekeyset            reg_dword = 1
certutil: -getreg command completed successfully.

 

any ideas?

 

thanks

 

thanks reply, uploaded requested log file , waiting response...

 

yes, have backed ca server metadata , related keys before.

 

thanks again!

hi,

based on file, private key missing. result, afraid have restore private key if there backup available.

---

this posting provided "as is" no warranties, , confers no rights. please remember click “mark answer” on post helps you, , click “unmark answer” if marked post not answer question. can beneficial other community members reading thread.

Windows Server  >  Security