無法將windows證書導出爲pkcs12 - 「密鑰無法在指定狀態下使用」

Question

我試圖將證書與PowerShell導出到pkcs12。我可以在MMC中導出它。但是PowerShell的barfs

PS C:\Users\paul> $cert.export('PFX'," pass") 
Exception calling "Export" with "2" argument(s): "Key not valid for use in specified state. 
" 
At line:1 char:13 
+ $cert.export <<<< ('PFX'," pass") 
    + CategoryInfo   : NotSpecified: (:) [], MethodInvocationException 
    + FullyQualifiedErrorId : DotNetMethodException 

私鑰可以導出

PS C:\Users\paul> $cert.privatekey.cspkeycontainerinfo 


MachineKeyStore  : True 
ProviderName   : Microsoft RSA SChannel Cryptographic Provider 
ProviderType   : 12 
KeyContainerName  : fd6ce48f23c5a94dee97bf7e87ef3da2_2868494a-a319-4976-80a7-e0f129e23cfd 
UniqueKeyContainerName : fd6ce48f23c5a94dee97bf7e87ef3da2_2868494a-a319-4976-80a7-e0f129e23cfd 
KeyNumber    : Exchange 
Exportable    : True 
HardwareDevice   : False 
Removable    : False 
Accessible    : True 
Protected    : False 
CryptoKeySecurity  : System.Security.AccessControl.CryptoKeySecurity 
RandomlyGenerated  : False 

運行的本地管理員

Answer 1

這似乎是一個長鏡頭，但你嘗試過使用的Pfx枚舉而不是字符串的？

$pfx = [System.Security.Cryptography.X509Certificates.X509ContentType]::Pfx 
$cert.Export($pfx,"pass") 

我之所以問的是，如果你看一下枚舉背後的價值，爲Pfx居然有3