Exchange Certificate Import Error (reason: PrivateKeyMissing).

KB ID 0000251


When renewing or installing an Exchange Server certificate you see the following…


F9{-- your thumbprint --}7398 was found but is not valid for use with Exchange Server
(reason: PrivateKeyMissing).
At line:1 char:27
+ Enable-ExchangeCertificate <<<< -Services "SMTP,POP,IMAP,IIS"

Exchange Cert PrivateKeyMissing


You need to run a repair on your certificate.

1. Click Start > type “MMC.exe” > add/remove snap in > Certificates > Computer Account > Local Computer > Finish > OK.

Run mmc

2. Expand Certificates Personal > Certificates > You will notice your certificate DOES NOT have a small key over it.

Certificate No Key Icon

3. Double click the certificate >Details > Serial Number > Select the serial number and press CTRL+C to copy.

certificate serial number

4. Start > type cmd {enter}

5. At command line issue the following command, {Insert your own serial number}

certutil -repairstore my “SerialNumber”


6. Right click certificates and refresh.

refresh certificates

7. You will notice now that your certificate has a small key over its icon, and if you double click it it will say “you have a private key that corresponds to this certificate”

small key on certificate

8. Now you can use that certificate with Exchange.


Related Articles, References, Credits, or External Links


Author: Migrated

Share This Post On