IIS: Export Private Key Option is Grayed When Exporting a Server
Certificate
Symptoms
When
exporting the server certificate from the server's personal certificate store,
you may not have the option to export the private key. If this is the case,
when the certificate was imported, the option to allow the private key to be
exported may have been unchecked. This is a security measure to prevent a
possible compromise of the server's private key. Since this could be a
potential security risk, the option to mark the private key as exportable is
not checked by default.
Resolution
To correct
this problem, you will need access to the original certificate backup (.pfx)
file. To ensure this problem does not happen in the future (should you want to
export the private key again) make sure during the import process that you
select the box "mark the private key as exportable."
