Export-PfxCertificate (pki) (2024)

Exports a certificate or a PFXData object to a Personal Information Exchange (PFX) file.

Syntax

Export-PfxCertificate [-NoProperties] [-NoClobber] [-Force] [-CryptoAlgorithmOption <CryptoAlgorithmOptions>] [-ChainOption <ExportChainOption>] [-ProtectTo <String[]>] [-Password <SecureString>] [-FilePath] <String> [-PFXData] <PfxData> [-WhatIf] [-Confirm] [<CommonParameters>]

Export-PfxCertificate [-NoProperties] [-NoClobber] [-Force] [-CryptoAlgorithmOption <CryptoAlgorithmOptions>] [-ChainOption <ExportChainOption>] [-ProtectTo <String[]>] [-Password <SecureString>] [-FilePath] <String> [-Cert] <Certificate> [-WhatIf] [-Confirm] [<CommonParameters>]

Description

The Export-PfxCertificate cmdlet exports a certificate or a PFXData object to a PersonalInformation Exchange (PFX) file. By default, extended properties and the entire chain are exported.

Delegation may be required when using this cmdlet with Windows PowerShell remoting and changinguser configuration.

Examples

EXAMPLE 1

$mypwd = ConvertTo-SecureString -String '1234' -Force -AsPlainTextGet-ChildItem -Path Cert:\LocalMachine\My\5F98EBBFE735CDDAE00E33E0FD69050EF9220254 | Export-PfxCertificate -FilePath C:\mypfx.pfx -Password $mypwd

This example exports a certificate from the local machine store to a PFX file which includes theentire chain and all external properties.

EXAMPLE 2

$mypwd = ConvertTo-SecureString -String '1234' -Force -AsPlainTextGet-ChildItem -Path Cert:\LocalMachine\My | Export-PfxCertificate -FilePath C:\mypfx.pfx -Password $mypwd

This example exports all certificates under the My store for the machine account into one file namedmypfx.pfx. In order for this cmdlet to succeed, all keys need to be exportable.

EXAMPLE 3

powershell$mypwd = ConvertTo-SecureString -String '1234' -Force -AsPlainText$params = @{ Cert = 'Cert:\CurrentUser\My\5F98EBBFE735CDDAE00E33E0FD69050EF9220254' FilePath = 'C:\myexport.pfx' ChainOption = 'EndEntityCertOnly' NoProperties = $true Password = $mypwd}Export-PfxCertificate @params

This example exports a certificate from the current user store with no chain and no externalproperties

EXAMPLE 4

$a = Get-ChildItem -Path Cert:\LocalMachine\My$params = @{ Cert = $a[1] FilePath = 'C:\myexport.pfx' ProtectTo = 'billb99', 'johnj99'}Export-PfxCertificate @params

This example exports a certificate from the local machine store. Both user accounts, billb99 andjohnj99, can access this PFX with no password. A Windows Server 2012 or later domain controller isrequired for key distribution.

EXAMPLE 5

$a = Get-ChildItem -Path Cert:\LocalMachine\My$mypwd = ConvertTo-SecureString -String '1234' -Force -AsPlainText$params = @{ Cert = $a[1] FilePath = 'C:\myexport.pfx' ProtectTo = 'billb99', '\johnj99' Password = $mypwd}Export-PfxCertificate @params

This example exports a certificate from the local machine store. Both user accounts, johnj99 andbillb99, can access this PFX file with no password. For everyone else, they need to use 1234 as apassword. A Windows Server 2012 or later domain controller is required for key distribution.

EXAMPLE 6

$NewPwd = ConvertTo-SecureString -String 'abcd' -Force -AsPlainText$mypfx = Get-PfxData -FilePath C:\mypfx.pfx -Password $OldpwdExport-PfxCertificate -PFXData $mypfx -FilePath C:\mypfx2.pfx -Password $NewPwd

This example changes an existing password for a PFX file from $OldPwd to $NewPwd.

Parameters

-Cert

-ChainOption

-Confirm

-CryptoAlgorithmOption

-FilePath

-Force

-NoClobber

-NoProperties

-Password

-PFXData

-ProtectTo

-WhatIf

Inputs

X509Certificate2[]

The X509Certificate2[] object is an array of certificate objects.

Outputs

FileInfo

The FileInfo object contains the information about the PFX file.

• ConvertTo-SecureString
• Get-ChildItem
• Get-PfxData
• Import-PfxCertificate