TSS1501E NO PRIVATE KEY EXISTS FOR CERTIFICATE for TSS EXPORT

Document ID : KB000014895
Last Modified Date : 14/02/2018
Show Technical Document Details
Introduction:

Resolving the TSS1501E NO PRIVATE KEY EXISTS FOR CERTIFICATE for a TSS EXPORT.

Question:

Getting the following error message for a TSS EXPORT:

TSS EXPORT(CERTAUTH) DIGICERT(QASMPE) DCDSN('RECUT.RECEIVE.QASMPE.CERT') FORMAT(PKCS12DER) PKCSPASS(QASMPE)

TSS1501E NO PRIVATE KEY EXISTS FOR CERTIFICATE
TSS0301I EXPORT FUNCTION FAILED, RETURN CODE = 4

Answer:

If a certificate doesn’t have a private key, you must use one of the non-PKCS12xxx formats. PKCS12 formatted certificates are for certificates that have a public and private key. Example:

TSS EXPORT(CERTAUTH) DIGICERT(QASMPE) DCDSN('RECUT.RECEIVE.QASMPE.CERT') FORMAT(CERTDER)