Hi Rob, If at the time you installed the certificate, you indicated that the private key was exportable, then you can export the certificate. If you did not indicate that the private key was exportable, you won't be able to export a usable certificate. However, you can easily generate another one with the same subject/common name as the original if you run into the latter situation. HTH, Tom Thomas W Shinder, M.D. Site: www.isaserver.org <http://www.isaserver.org/> Blog: http://blogs.isaserver.org/shinder/ Book: http://tinyurl.com/3xqb7 <http://tinyurl.com/3xqb7> MVP -- ISA Firewalls ________________________________ From: Rob Moore [mailto:RMoore@xxxxxxxx] Sent: Friday, March 10, 2006 10:06 AM To: [ISAserver.org Discussion List] Subject: [isalist] Moving a certificate from one server to another http://www.ISAserver.org Hello all-- You may recall that a couple of weeks ago I emailed the list about a remote ISA 2004 server that was giving me trouble (I can no longer connect to it via RDP). We were never able to solve it, so I've decided the easiest approach will be to rebuild the server. My only concern is that I've installed a certificate on the remote server (I generated the certificate with my CA in the local network) which I use to establish my site-to-site VPN. Ideally, I'd like to NOT have to regenerate that certificate. So, is it possible (and easy) for me to copy the certificate off the ISA server, rebuild the server, and then re-install the certificate? Thanks, Rob -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-= Rob Moore Network Manager 215-241-7870 Help Desk: 800-500-AFSC ------------------------------------------------------ List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ ------------------------------------------------------ Visit TechGenix.com for more information about our other sites: http://www.techgenix.com ------------------------------------------------------ You are currently subscribed to this ISAserver.org Discussion List as: tshinder@xxxxxxxxxxxxxxxxxx To unsubscribe visit http://www.webelists.com/cgi/lyris.pl?enter=isalist Report abuse to listadmin@xxxxxxxxxxxxx