Unable to export an installed certificate to .pfx
If you’re trying to export an installed certificate into the .pfx format but the option is greyed out like when I was working with it for vPro provisioning, then it might be due to missing private keys. In my case, I’ve received a provisioning certificate from Comodo where I purchased it but was not able to export it to .pfx format which is required by the Out-of-Band Service Point in SCCM. If you are one of those that have this same experience, what you need to do is to recover the private key. To do this, type in certutil –repairstore my “<serialnumber>”.
How do you locate your serial number? Simply double-click on the certificate that you would like to export, go to the Details tab and note down the Serial Number found there. Once the command completed successfully, attempt to export the certificate again and you’ll see now that you are able to select to export the private key and the .pfx format option is now enabled.