Exchange Certificate Import Error (reason: PrivateKeyMissing).

KB ID 0000251 Dtd 18/05/10


When renewing or installing an Exchange Server certificate you see the following…


F9{-- your thumbprint --}7398 was found but is not valid for use with Exchange Server
(reason: PrivateKeyMissing).
At line:1 char:27
+ Enable-ExchangeCertificate <<<< -Services "SMTP,POP,IMAP,IIS"



You need to run a repair on your certificate.

1. Click Start > type “MMC” > add/remove snap in > Certificates > Computer Account > Local Computer > Finish > OK.

launch mmc

2. Expand Certificates Personal > Certificates > You will notice your certificate DOES NOT have a small key over it > Double click the certificate >Details > Serial Number > Select the serial number and press CTRL+C to copy.

certificate serial number

3. Start > type cmd {enter}

4. At command line issue the following command, {Insert your own serial number}

certutil -repairstore my “SerialNumber”


5. Right click certificates and refresh.

refresh certificates

6. You will notice now that your certificate has a small key over its icon, and if you double click it it will say “you have a private key that corresponds to this certificate”

small key on certificate

7. Now you can use that certificate with Exchange.


Related Articles, References, Credits, or External Links


Author: Migrated

Share This Post On