If you ever need to export certificates on a windows machine with private keys which are flagged as non exportable. You can use Mimekatz:
http://blog.gentilkiwi.com/mimikatz, you only need two commands to do this:
crypto::patchcapi
crypto::exportCertificates CERT_SYSTEM_STORE_LOCAL_MACHINE
I used it to dump certificates with private keys from the system certifcate store on a server 2012 machine.
If you want to dump other certificate stores, you can use
http://msdn.microsoft.com/en-us/library/windows/desktop/aa388136(v=vs.85).aspx as a reference
No comments:
Post a Comment