SharePoint Blogs / SharePoint University
SharePoint Blogs and SharePoint University - all in one place!
Need SharePoint Training? Attend a SharePoint Bootcamp!

Please delete cookies related to sharepointblogs.com and sharepointu.com to resolve login issues!

Exchange 2007 Cert's at stupid!!! But here's an important too.

Error Reason: Private Key Missing Exchange 2007 Cert Enable-ExchangeCertificate 

This solves the PrivateKeyMissing error when enabling imported SSL Certs. Mine was from Godaddy and I used the delete from the MMC:Cert Manager. I should have used remove-ExchangeCertificate!

credit goes to http://209.85.173.104/search?q=cache:eeWeH1Qc9nQJ:www.folin.se/+exchange+2007+enable+cert+Private+Key+Missing+solution&hl=en&ct=clnk&cd=3&gl=us

 

RESOLUTION
The original certificate may be repairable (from the server that initially requested the Certificate).How to assign a private key to a new certificate after you use the Certificates snap-in to delete the original certificate in Internet Information ServicesINTRODUCTION
This article describes how to recover a private key after you use the Certificates Microsoft Management Console (MMC) snap-in to delete the original certificate in Internet Information Services (IIS). You delete the original certificate from the personal folder in the local computer’s certificate store. This article assumes that you have the matching certificate file backed up as a PKCS#7 file, as a .cer file, or as a .crt file.To assign the existing private key to a new certificate, you must use the Microsoft Windows Server 2003 version of Certutil.exe. To do this, follow these steps:

1. Log on to the computer that issued the certificate request by using an account that has administrative permissions.
2. Click Start, click Run, type mmc, and then click OK.
3. On the File menu, click Add/Remove Snap-in.
4. In the Add/Remove Snap-in dialog box, click Add.
5. Click Certificates, and then click Add.
6. In the Certificates snap-in dialog box, click Computer account, and then click Next.
7. In the Select Computer dialog box, click Local computer: (the computer this console is running on), and then click Finish.
8. Click Close, and then click OK.
9. In the Certificates snap-in, expand Certificates, right-click the Personal folder, point to All Tasks, and then click Import.
10. On the Welcome to the Certificate Import Wizard page, click Next.
11. On the File to Import page, click Browse.
12. In the Open dialog box, click the new certificate, click Open, and then click Next.
13. On the Certificate Store page, click Place all certificates in the following store, and then click Browse.
14. In the Select Certificate Store dialog box, click Personal, click OK, click Next, and then click Finish.
15. In the Certificates snap-in, double-click the imported certificate that is in the Personal folder.
16. In the Certificate dialog box, click the Details tab.
17. Click Serial Number in the Field column of the Details tab, highlight the serial number, and then write down the serial number.
18. Click Start, click Run, type cmd, and then click OK.
19. At the command prompt, type the following:
certutil -repairstore my “
SerialNumberSerialNumber is the serial number that you wrote down in step 17.
20. In the Certificates snap-in, right-click Certificates, and then click Refresh.The certificate now has an associated private key.

You can now use the IIS MMC to assign the recovered keyset (certificate) to the Web site that you want

Keywords: The SSL server credential’s certificate does not have a private key information property attached to it. This most often occurs when a certificate is backed up incorrectly and then later restored. This message can also indicate a certificate enrollment failure.
Source: Schannel
Event ID: 36869


Posted 01-15-2008 3:58 PM by jbenisek

Comments

vishal wrote re: Exchange 2007 Cert's at stupid!!! But here's an important too.
on 02-26-2008 11:55 AM

thanks for the info..... worked like a charm of us and we were struggling for two days to get this done.

blog.matthewtrotter.com » Blog Archive » PrivateKeyMissing when running Enable-ExchangeCertificate wrote blog.matthewtrotter.com » Blog Archive » PrivateKeyMissing when running Enable-ExchangeCertificate
on 05-07-2008 3:55 PM

Pingback from  blog.matthewtrotter.com  » Blog Archive   » PrivateKeyMissing when running Enable-ExchangeCertificate

Bob wrote re: Exchange 2007 Cert's at stupid!!! But here's an important too.
on 09-30-2008 7:18 AM

I followed the steps outlined but get a failure at step 19 with error message: Object was not found

0x80090011 <-2146893807>

Noel wrote re: Exchange 2007 Cert's at stupid!!! But here's an important too.
on 12-01-2008 3:14 PM

Worked Great!  Thanks for this post.

Jean-Pierre wrote re: Exchange 2007 Cert's at stupid!!! But here's an important too.
on 12-14-2008 10:56 AM

Thanks, this saved me money (I was close to buy another certificate) and more a lot more wasted time.

error a crear certificados para ex2007 | hilpers wrote error a crear certificados para ex2007 | hilpers
on 01-18-2009 5:38 AM

Pingback from  error a crear certificados para ex2007 | hilpers

TLS Cert expiration | keyongtech wrote TLS Cert expiration | keyongtech
on 01-18-2009 10:47 AM

Pingback from  TLS Cert expiration | keyongtech

Jan wrote re: Exchange 2007 Cert's at stupid!!! But here's an important too.
on 02-26-2009 1:13 PM

Helped me a lot... thanks

Philipp wrote re: Exchange 2007 Cert's at stupid!!! But here's an important too.
on 03-10-2009 3:54 PM

Thanks, you saved my day!

Idris wrote re: Exchange 2007 Cert's at stupid!!! But here's an important too.
on 04-04-2009 6:35 AM

This worked. I'm very grateful

Jesus wrote re: Exchange 2007 Cert's at stupid!!! But here's an important too.
on 04-07-2009 9:26 PM

Hi, Really usefull information

Obama wrote re: Exchange 2007 Cert's at stupid!!! But here's an important too.
on 05-19-2009 4:21 AM

Thanks alot!! It made my day.

mark layton wrote re: Exchange 2007 Cert's at stupid!!! But here's an important too.
on 05-21-2009 10:34 AM

brilliant - thank you!

Danny wrote re: Exchange 2007 Cert's at stupid!!! But here's an important too.
on 06-03-2009 3:11 PM

i get an error.

-repairstore failed.

Access denied.

Can someone help?

Joel wrote re: Exchange 2007 Cert's at stupid!!! But here's an important too.
on 06-03-2009 5:49 PM

Ahhhhhhh!!!

Add a Comment

(required)  
(optional)
(required)  
Remember Me?
Need SharePoint Training? Attend a SharePoint Bootcamp!
Posts (c) their respective authors. Everything else (c) 2009 SharePoint Experts, Inc.