The Export-PfxCertificate cmdlet is a powerful tool for Windows users that allows them to export certificates to a Personal Information Exchange (PFX) file. This cmdlet is part of the Windows PowerShell module and is used to export certificates from the Windows Certificate Store to a PFX file. The PFX file is a password-protected file that contains the certificate, its private key, and any additional certificates needed to complete a chain of trust. This cmdlet is useful for backing up certificates, transferring them to another computer, or sharing them with other users.
Syntax
The syntax for the Export-PfxCertificate cmdlet is as follows:
Export-PfxCertificate -Cert
Parameters
The Export-PfxCertificate cmdlet has the following parameters:
| Parameter | Description |
|---|---|
| -Cert | Specifies the certificate to export. This parameter is required. |
| -FilePath | Specifies the path and file name of the PFX file to export the certificate to. This parameter is required. |
| -Password | Specifies the password to use to encrypt the PFX file. If this parameter is not specified, the user will be prompted for a password. |
| -Exportable | Specifies that the private key of the certificate should be exportable. By default, the private key is not exportable. |
| -Force | Forces the cmdlet to overwrite an existing PFX file. |
| -WhatIf | Shows what would happen if the cmdlet runs. The cmdlet is not run. |
| -Confirm | Prompts you for confirmation before running the cmdlet. |
Inputs
The Export-PfxCertificate cmdlet accepts the following input types:
- System.Security.Cryptography.X509Certificates.X509Certificate2
Outputs
The Export-PfxCertificate cmdlet does not return any output.
Examples
The following example exports the certificate with the thumbprint “123456789ABCDEF123456789ABCDEF123456789A” to the file “C:\cert.pfx” with the password “P@ssw0rd”:
Export-PfxCertificate -Cert (Get-ChildItem -Path Cert:\LocalMachine\My\123456789ABCDEF123456789ABCDEF123456789A) -FilePath C:\cert.pfx -Password (ConvertTo-SecureString -String “P@ssw0rd” -Force -AsPlainText)
Tips
When using the Export-PfxCertificate cmdlet, keep the following tips in mind:
- The certificate must be in the Windows Certificate Store before it can be exported.
- The private key of the certificate must be exportable in order to be exported to a PFX file.
- If the -Password parameter is not specified, the user will be prompted for a password.
- If the -Force parameter is not specified, the cmdlet will not overwrite an existing PFX file.
- The -WhatIf and -Confirm parameters can be used to preview and confirm the cmdlet before it is run.