TSS1501E NO PRIVATE KEY EXISTS FOR CERTIFICATE for TSS EXPORT

Products

• Top Secret

Issue/Introduction

Getting the following error message for a TSS EXPORT:

TSS EXPORT(CERTAUTH) DIGICERT(xxxxx) DCDSN('xxxxxx') FORMAT(PKCS12DER) PKCSPASS(xxxxx)

TSS1501E NO PRIVATE KEY EXISTS FOR CERTIFICATE
TSS0301I EXPORT FUNCTION FAILED, RETURN CODE = 4

Environment

Release: TOPSEC00200-15-Top Secret-Security
Component:

Resolution

Issue a TSS LIST(acid) DIGICERT(digicertname) to list the certificate.

The certificate doesn't have a private key if the "PRIVATE KEYSIZE" is not present in the TSS LIST output.

To TSS EXPORT a certificate without a private key:

Example:

TSS EXPORT(CERTAUTH) DIGICERT(xxxxx) DCDSN('xxxxx')

 

Certificates with no private key use:

• FORMAT(CERTDER)
• FORMAT(CERTB64) 

Certificates with private key use:

• FORMAT(PKCS12DER)
• FORMAT(PKCS12B64)