CODEWITHSUNDEEP
internet-explorerssl-certificate
doptimusprime
doptimusprime

Reputation: 9413

Use of the certificate with private key not marked as exportable

I would like to know what is the use of certificate of which private key is not marked as epxortable. I saw that while sending a certificate request from Internet Explorer to a certificate server, it gives option to mark the key as not exportable.

Upvotes: 1

Views: 3154

Answers (1)

Eugene Mayevski 'Callback
Eugene Mayevski 'Callback

Reputation: 46070

This is not a common usage scenario to create a non-exportable private key when creating a certificate request unless this key goes directly to the hardware (USB token and alike). Yet, it's possible for example when machine-bound certificates are created in corporate environments. In this case it's better to mark the certificate as non-exportable - if the machine is gone, you can issue new certificate for new machine and block (revoke) the previous one.

Usually non-exportable keys are used when you import the existing certificate with a private key - non-exportable flag is set for security reason.

Upvotes: 2

Related Questions