Hi All,

Yesterday I replaced the expired certificates on our ADFS server. that went through fine but I am unable to set the private key permissions on the sigining cert.

It is in the local computer cert store and is all reporting as an OK cert. However ADFS is not working and I suspect its because I need to set permissions on the private key.

If i go to manage private keys i get access denied and if i try to export I cant export private key.

Please

Hi,

If i go to manage private keys i get access denied and if i try to export I cant export private key.

The reason why the private key cannot be exported is because it is not marked as exportable on the corresponding certificate template.

If the certificate was issued by an internal CA, please modify the certificate template as below:

If the certificate was purchased, please contact vendor support.

Best Regards,

Amy