{"id":473,"date":"2016-01-19T15:57:30","date_gmt":"2016-01-19T15:57:30","guid":{"rendered":"http:\/\/www.pkipartner.support\/?page_id=473"},"modified":"2016-02-22T12:35:15","modified_gmt":"2016-02-22T12:35:15","slug":"csr-backing-up-the-private-key","status":"publish","type":"page","link":"https:\/\/pkipartner.com\/support\/csr-backing-up-the-private-key\/","title":{"rendered":"CSR – Backing up the private key"},"content":{"rendered":"

Backing up the private key of the pending request <\/strong><\/h1>\n

Click the Start Button, select Run, type mmc and select OK
\n\"CSR<\/a>
\nClick File and select Add\/Remove Snap in
\n\"CSR<\/a>
\nSelect Add
\n\"CSR<\/a>
\nSelect Certificates from the Add Standalone Snap-in box and click Add
\n\"CSR<\/a>
\nSelect Computer Account (NOTE: This step is very important. It must be the computer account and no other account) and click Next
\n\"CSR<\/a>
\nSelect Local Computer and select Finish
\n\"CSR<\/a>
\nClose the Add Standalone Snap-in box, click OK in the Add\/Remove Snap in
\nReturn to the MMC<\/p>\n

Look for a folder named Request or Certificate Enrolment Requests. Under this folder, you can see the Certificates folder. You can see the corresponding key for the certificate request key that you made earlier.<\/p>\n

Select the key that you want to back up.<\/p>\n

Right-click the key, click All Tasks, and then click Export.
\n\"CSR<\/a>
\nWhen the Certificate Export Wizard starts, click Next on the Welcome page.
\n\"CSR<\/a>
\nSelect Yes, export the private key, and then click Next.
\n\"CSR<\/a>
\nOn the Export File Format page, accept the default settings, and then click Next. Note that Enable strong protection (requires IE 5.0, NT 4.0 SP4 or above) is selected.
\n\"CSR<\/a>
\nType and confirm a password for the private key, and then click Next.
\n\"CSR<\/a>
\nOn the File to Export page, save the key (which is a .pfx file) on a set location, and then click Next. It is important to make a copy of the private key that does not reside on the actual server in case the server crashes.
\n\"CSR<\/a>
\nClick Finish. You receive a message that states that the export was successful.
\n\"CSR<\/a>
\nNote : If you do not have the backup of the private key of the pending request, you must make a new certificate request, because there is no way to install the certificate for the corresponding request once it is removed or lost.<\/p>\n

Import the backup copy of the private key of the pending request <\/strong><\/p>\n

If you have a backup copy of the private key of the pending request, follow these steps to import the private key:<\/p>\n

Click the Start Button, select Run, type mmc and select OK<\/p>\n

\"CSR<\/a><\/p>\n

Click File and select Add\/Remove Snap in<\/p>\n

\"CSR<\/a><\/p>\n

Select Add<\/p>\n

\"CSR<\/a><\/p>\n

Select Certificates from the Add Standalone Snap-in box and click Add<\/p>\n

\"CSR<\/a><\/p>\n

Select Computer Account (NOTE: This step is very important. It must be the computer account and no other account) and click Next<\/p>\n

\"CSR<\/a><\/p>\n

Select Local Computer and select Finish<\/p>\n

\"CSR<\/a><\/p>\n

Close the Add Standalone Snap-in box, click OK in the Add\/Remove Snap in
\nReturn to the MMC.<\/p>\n

Look for a folder named Request or Certificate Enrolment Requests. Under this folder, you can see the Certificates folder.<\/p>\n

Right-click the Certificates folder, click All Tasks, and then click Import.<\/p>\n

\"CSR<\/a><\/p>\n

When the Certificate Import Wizard starts, click Next.<\/p>\n

\"CSR<\/a><\/p>\n

Locate and select the private key (.pfx) file of the pending request that you backed up, and then click Next.<\/p>\n

\"CSR<\/a><\/p>\n

Type the password for the private key (this is the password that you specified when you backed up the private key for the pending request), and then select Mark the Private key as exportable. Click Next.<\/p>\n

\"CSR<\/a><\/p>\n

Select Place all certificates in the following store. Make sure that the default certificate store is REQUEST, and then click Next.<\/p>\n

\"CSR<\/a><\/p>\n

On the Completing the Certificate Import Wizard page, click Finish. You receive a message that tells you that the import was successful.<\/p>\n

\"CSR<\/a><\/p>\n

The private key of your pending request is now restored.<\/p>\n","protected":false},"excerpt":{"rendered":"

Backing up the private key of the pending request Click the Start Button, select Run, type mmc and select OK Click File and select Add\/Remove Snap in Select Add Select Certificates from the Add Standalone Snap-in box and click Add Select Computer Account (NOTE: This step is very important. It\u2026<\/p>\n

Continue reading<\/span><\/i><\/a> <\/p>\n","protected":false},"author":1,"featured_media":0,"parent":0,"menu_order":0,"comment_status":"closed","ping_status":"closed","template":"","meta":{"footnotes":""},"_links":{"self":[{"href":"https:\/\/pkipartner.com\/support\/wp-json\/wp\/v2\/pages\/473"}],"collection":[{"href":"https:\/\/pkipartner.com\/support\/wp-json\/wp\/v2\/pages"}],"about":[{"href":"https:\/\/pkipartner.com\/support\/wp-json\/wp\/v2\/types\/page"}],"author":[{"embeddable":true,"href":"https:\/\/pkipartner.com\/support\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/pkipartner.com\/support\/wp-json\/wp\/v2\/comments?post=473"}],"version-history":[{"count":3,"href":"https:\/\/pkipartner.com\/support\/wp-json\/wp\/v2\/pages\/473\/revisions"}],"predecessor-version":[{"id":659,"href":"https:\/\/pkipartner.com\/support\/wp-json\/wp\/v2\/pages\/473\/revisions\/659"}],"wp:attachment":[{"href":"https:\/\/pkipartner.com\/support\/wp-json\/wp\/v2\/media?parent=473"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}