System.Security .Cryptography.R SA.ToXmlString - Key not valid for use in specified state

[Eric Simmons]

Hello,

I am trying to run a .NET 2.0 application that I developed and I am
getting the following error:

Key not valid for use in specified state

I am attempting to retrieve the X509Certificate 2.PrivateKey as an XML
string via the ToXmlString() function and this error occurs. Below is
an example of the command line call that I used to make my test
certificate.

Using makecert in the following manner:
"C:\Program Files\Microsoft Visual Studio
8\Common7\Tools \Bin\makecert.e xe" -r -pe -n "CN=TestCertifi cate" -b
01/01/2000 -e 01/01/2036 -eku 1.3.6.1.5.5.7.3 .1 -ss my -sr localMachine
-sky exchange -sp "Microsoft RSA SChannel Cryptographic Provider" -sy 12
TestCertificate .cer

I have no problem making the call of the ToXmlString() function on my
development machine, which is where I constructed the certificate, but
when I export the certificate from my development machine and import
onto a test machine, I get the "Key not valid for use in specified
state" error message on the test machine. I made sure to export my
private key, and I am even using the Microsoft WSE 3.0 Certificate Tool
to verify that the private key has been properly exported to the test
machine. I even made sure that the user attempting to access the
private key has the proper access permissions.
Below is the stack trace that I am getting when calling the ToXmlString
function
STACK TRACE:
at
System.Security .Cryptography.C ryptographicExc eption.ThrowCry ptographicEx
ception(Int32 hr)
at System.Security .Cryptography.. utils._ExportKe y(SafeKeyHandle hKey,
Int32 blobType, Object cspObject)
at
System.Security .Cryptography.R SACryptoService Provider.Export Parameters(B
oolean includePrivateP arameters)
at System.Security .Cryptography.R SA.ToXmlString( Boolean
includePrivateP arameters)

Any help on this would be greatly appreciated. Thanks in advance.

*** Sent via Developersdex http://www.developersdex.com ***

[marcoperestrello]

In my case, when I imported the certificate into the key store I did
not select the Mark as Exportable option. This is necessary to access
to private key.
Eric Simmons escreveu:

Hello,

I am trying to run a .NET 2.0 application that I developed and I am
getting the following error:

Key not valid for use in specified state

I am attempting to retrieve the X509Certificate 2.PrivateKey as an XML
string via the ToXmlString() function and this error occurs. Below is
an example of the command line call that I used to make my test
certificate.

Using makecert in the following manner:
"C:\Program Files\Microsoft Visual Studio
8\Common7\Tools \Bin\makecert.e xe" -r -pe -n "CN=TestCertifi cate" -b
01/01/2000 -e 01/01/2036 -eku 1.3.6.1.5.5.7.3 .1 -ss my -sr localMachine
-sky exchange -sp "Microsoft RSA SChannel Cryptographic Provider" -sy 12
TestCertificate .cer

I have no problem making the call of the ToXmlString() function on my
development machine, which is where I constructed the certificate, but
when I export the certificate from my development machine and import
onto a test machine, I get the "Key not valid for use in specified
state" error message on the test machine. I made sure to export my
private key, and I am even using the Microsoft WSE 3.0 Certificate Tool
to verify that the private key has been properly exported to the test
machine. I even made sure that the user attempting to access the
private key has the proper access permissions.
Below is the stack trace that I am getting when calling the ToXmlString
function
STACK TRACE:
at
System.Security .Cryptography.C ryptographicExc eption.ThrowCry ptographicEx
ception(Int32 hr)
at System.Security .Cryptography.. utils._ExportKe y(SafeKeyHandle hKey,
Int32 blobType, Object cspObject)
at
System.Security .Cryptography.R SACryptoService Provider.Export Parameters(B
oolean includePrivateP arameters)
at System.Security .Cryptography.R SA.ToXmlString( Boolean
includePrivateP arameters)

Any help on this would be greatly appreciated. Thanks in advance.

*** Sent via Developersdex http://www.developersdex.com ***