Export the SSL keys

Similar Questions

• Export the SSL keys problem

  I am trying to export ssl certificates & keys of Keychain Access on our server (5.1.7) for purposes of future recovery disaster. I have multiple ssl certificates installed and most is very well, but one in particular has 4 public keys and 5 private keys. I don't know what keys to export! I tried to export several public keys and compared; they are all different. I don't know how to determine which is correct. As you can see below, none has yet a timestamp.

  

  Any ideas? Alternatively, is there another way I can go about this?

  There is a reason any you do not export only each of them? They are very small files and if you guess wrong and one to exclude your claim won't go well.

  C.

• How to export the public key / certificate of OUD?

  Hi all

  Maybe it's to export the public key of a unified directory of Oracle?

  I.e. I have Setup SSL on port 636.

  I had created a new certificate self-signed and added to the LDAP server following the guide of SSL to get up and running fast - Oracle Fusion Middleware Oracle Administration Guide unified directory.

  But the certificate for the LDAP server sends when the connection to this is some other certificate and not my certificate.

  CN = computer name, O = Oracle unified the self-signed certificate directory

  Instead of

  CN = Company.com, o = company, c is AU

  that I had created. Because when I created this certificate I exported public key in a text file as per step 4.

  Any guidance would be great.

  Hello

  You want to assign a new SSL certificate to the OUD instance or you just want to export the existing one so that you can import it into a truststore customer?

  To export the cert public key OUD, follow these steps:

  JAVA_HOME/bin/keytool - export - keystore /OUD/config/keystore-alias server-cert-file mycert.cer

  You will be asked the password store which is located in OUD_INSTANCE_DIR>/OUD/config/keystore.pin

  -Sylvain

  ------

  When closing a thread as answered don't forget to mark the messages correct and useful to make it easier for others to find their

• out-of-range security question: export a certificate with the private key

  Salvation of the Forumers

  As above mention of title, if we do PKI, we you get invovle with certificate.

  When I made an express unit WLC and ACS, where the appliances doesn't come with generate CSR function... So we use openSSL for it.

  To clear my curiosity, why we need to export the private key certifiate wit? Itsn can't the private key cannot publish to the public?

  Thank you

  Noel

  Because two devices act as a server, and you would need to have the private key of the server. However, you do not have the private key to all customers for sure you mentioned you need to provide the public key to the client, not the private key only. Private key should only be stored on the server, and in this case, the two devices are the server.

• SG300-28 import self-signed SHA2 certificate to the SSL Protocol (including the format? How do I?)

  1. What is the format a certificate and private key combination should play during import to use SSL?

  2. how actually import you - via CLI or web interface.

  I'm trying to import an SSL certificate that is self-signed in the SG300-28 to secure the connection to the web interface of the switch. The certificate is signed by my own 'certification authority' / custom root certificate.

  I tried to do it via the graphical interface of web management (security > SSL server > server SSL authentication) and the command-line via SSH. I will detail my exact process below. I had no problem importing a certificate created in the same way to the Cisco RV320 router, although the web interface is different.

  How to create a certificate that is accepted by the switch?

  (Image Active) firmware version: 1.4.0.88

  My approach:

  1. OpenSSL 1.0.1f January 6, 2014; on an ubuntu 14.04 machine
  2. Create my own, certificate of self-signed root:

   openssl genrsa -out rootCA.key 2048 openssl req -x509 -new -nodes -key rootCA.key -days 3650 -out rootCA.pem

  3. create a private key and the real certificate and sign them using the rootCA.pem:

   openssl genrsa -out switch.key 2048 openssl req -new -key switch.key -out switch.csr openssl x509 -req -in switch.csr -CA rootCA.pem -CAkey rootCA.key -CAcreateserial -out switch.crt -days 3500

  for later use, export the public key of the switch.key - file using

   openssl rsa -in switch.key -pubout > switch.pubkey

  4. open the web interface of the switch and check for the SSL settings (Security > SSL server > server SSL authentication).

  4.1 click "import certificate".

  4.2 paste the contents of the switch.crt file in the ' certificate:'-textbox

  4.3 to import pair of RSA keys

  4.4. Paste the contents of the switch.pubkey file in the public key field

  4.5 by selecting the 'Clear text' radiobutton control and paste the contents of the inside switch.pubkey

  4.6 click 'apply '.

  4.7 receive an error message 'invalid key head '.

  The private key looks like this (oviously, I created a new one for this example):

   -----BEGIN RSA PRIVATE KEY----- MIIEpAIBAAKCAQEA3gOvNzKqULXnT7zL9fl4KJAZMo5eYHfwPSN0wl385na37oHz [23 more lines truncated] aB7Pooa60anjIVJmlSIp4WJ8U+52BMKJZ5rqHnJ1sBBo1zpAtcdspg== -----END RSA PRIVATE KEY-----

  I also receive a header invalid key error when you try to import the private via CLI SSH key using:

   switch(config)#crypto key import rsa

  I also converted the certificate and the private in PKCS12 and then back to the PEM key that gives me the following private key "head" which is not always accepted when pasting in the CLI:

   Bag Attributes localKeyID: FE 24 88 34 66 BE E9 DB CE 4E 91 23 2C 0E 03 B1 A7 58 32 24 Key Attributes:  -----BEGIN PRIVATE KEY----- MIIEvgIBA[...] -----END PRIVATE KEY-----

  What key header miss / what am doing wrong in general?

  It seems that ' import key cryptographic rsa "command is not suitable for import SSL key related private, but rather for the importation of SSH keys. Code "key header is missing" means that switch expects anything other than "-----BEGIN RSA PRIVATE KEY-----", for example the headers that you can see after the execution of ' view keys cryptographic rsa "(- START PRIVATE KEY ENCRYPTED SSH2-).

  To get your SSL certificate installed, you have two options:

  The CLI option:

  • create a RSA private key with command

   switch(config)#crypto certificate 2 generate key-generate 1024

  • create the certificate request with

   switch#crypto certificate 2 request

  (don't forget to provide all information for this order, including '' cn '' and so on). Note that this command must be executed inside the privileged mode and not in mode configuration as the previous command.

  • After you run this command, you'll get sign certificate request (CSR). Copy and paste it into the new file on the server that hosts your certification authority.
  • now sign this CSR file with the command that you have already used:

   openssl x509 -req -in switch.csr -CA rootCA.pem -CAkey rootCA.key -CAcreateserial -out switch.crt -days 3500

  • After signing to just open the file "switch.crt" and copy all content between BEGIN and END section including.
  • and import this certificate with order

   switch(config)#crypto certificate 2 import

  • and finally for your certificate to be active, do it with the following command:

   switch(config)#ip https certificate 2

  WebGUI option:

  Here, the procedure is similar to the CLI:

  • You must click on "Generate certificate request" in the "Security-> SSL server-> server SSL authentication" section, fill in all necessary data and click on "Generate certificate request."
  • you will get CSR data you need to paste into the server with the certificate of the CA.
  • sign the certificate with the command openssl similar as mentioned previously
  • and import a certificate with maintaining "import RSA Key-Pair" unchecked.

  Personally I've never managed to get imported both key and certificate from the outside.

• Help generate the SSL certificate for the Security Server

  Hi people,

  We have server (ss - 01.mydomain.local) security and connection server (cs - 01.mydomain.local). Now intend to install a certificate on the Security server. What should be the common name.

  our Web site is something like access.mydomain.local.

  Also, we plan to install SSL only on security for internet access server, this will affect the internal users, access to the connection to the server.

  Thanks and greetings

  J P Raj

  Take a look at the link below

  https://pubs.VMware.com/horizon-view-60/topic/com.VMware.ICbase/PDF/horizon-view-60-scenarios-SSL-certificates.PDF

  Internal users will not be affected when you install the Security server certificates

  Simply create a CSr file > get certificates and import them to the Security server in the MMC guide explains practically everything. If you already have certificates wildcard certificates, then you can follow the sub process

  (a) export the server certificates

  (1) to connect to the server that has certificates

  (2) for this server to export it to a PFX format certificate.

  (3) open the Microsoft MMC Certificates snap-in for the computer account.

  4) navigate to certificates (Local computer) > personal > certificates.

  (5) right-click on the signed certificate that is to be exported.

  6) click all tasks > export.

  (7) on the Welcome screen, click Next.

  8) click Yes, export the private key.

  (9) if it is an option, click on include all certificates in the certification path.

  (10) enter a password for the private key. This is required for the import certificates.

  (11) to enter a file name and location. For example, C:\certificates\certificate.pfx.

  12) click Next.

  13) click Finish.

  b) import it to the use of broker or planned connection securityr.

  Certificates of thye 1) import (preferable Pfx format) for the server broker or planned connection security.

  (2) open the Microsoft MMC Certificates snap-in for the computer account.

  3) navigate to certificates (Local computer) > personal > certificates.

  (4) right-click the certificates.

  5) click on Import.

  (6) through the pfx and click Next.

  (7) enter the certificate password.

  (8) select Mark keys as being exportable.

  9) click Next.

  10) click Finish.

  (c) restart Consulting Services

  To restart the services:

  Log in as an administrator on the server that is running the Server VMware View connection server VMware View connection or VMware View Server Security.

  Click Start > run, type services.msc and press ENTER.

  In the list of services, right-click on the VMware View connection Server or VMware View Server Security service.

  Click on restart and wait for service to stop and start.

• Firefox Mobile has a kind of key store? How to import the SSL client certificate?

  Firefox Mobile has a kind of key store? How to import the SSL client certificate?

  There is no built-in way to add client certificates to Firefox for mobile. We hope to add this in a future version.

  See this previous question for some (kind of complicated) ways to add client certificates in the current version of Firefox for mobile:
  https://support.Mozilla.com/en-us/questions/786035?s=certificate & As = s

• How the export of certificate does not have the personal key file?

  My windows XP pro os stopped working.  I installed the drive in an another win xp pro computer.  I can access all files unencrypted. I don't have a backup of certificate of non-working os.  I am trying to locate and move the files keys and personal certificates for the operating system to work in the hope that I can move the files encrypted on an external drive. I find the key and certificate records in the non-working drive and moved application data folder content to the location on the disk to work.  This did me not access files encrpyted.  I can see and export the personal certificate with os work, but export cannot see the personal touch.  What should I do for the key files so that the bone of work can export the key or access the encrypted files?  I have to remove the personal certificate supplied with the os to work?  I also tried adding the user to work operating system advanced details encrypted file properties.  I get an error message 5.  Are there not somehow work os can use the information from the non-working operating system to work with these encrypted files?

  No, if you do not save a recovery of encryption key before the old computer die these files are now permanently out of reach.  If they could be deciphered easily while the encryption wouldn't have degree of protection, doesn't it?

• How to fix a client SSL key private credential error code in the event viewer

  Hi people,

  I hope someone can help. I am currently using Windows 7 Professional 64 bit, updated with the latest updates from Microsoft.

  I get the following error message, ()every 5 minutes exactly) in the Event Viewer administrative, computer management.

  "A fatal error has occurred when trying to access the private key SSL client credential." The error code returned from the cryptographic module is 0x8009030d. The internal error state is 10003 "

  It began on October 14, 2014. There are now more than 40,000 of the codes of this edition.

  A sample of the log data is as follows;

  Log name: System
  Source: Schannel
  Date: 18/10/2014-20:54:40
  Event ID: 36870
  Task category: no
  Level: error
  Keywords:
  User: SYSTEM
  Computer: AP1
  Description:
  A fatal error occurred when attempting to access the private key SSL client credential. The error code returned from the cryptographic module is 0x8009030d. The internal error state is 10003.
  The event XML:
  
   
     
      36870
      0
      2
      0
      0
      0 x 8000000000000000
     
      133003
     
     
      System
      AP1
     
   
   
      customer
      0x8009030d
      10003
   
  

  I looked at all the suggestions online and have found nothing of what is specific to this problem for windows 7 and how to solve it. I would be grateful if someone could guide me in the way to solve the problem.

  Thanks in advance.

  Tom

  Dear Isha,

  Thanks for your follow-up. After spending considerable time on the issue, I stopped just by using the function of collective housing, which heals many error codes. It is redundant to a standard network configuration and is not worthwhile. Since Windows 10 deletes the function of group living, I'm not sure that I need to spend time on this...

  I have also had also removed the bad machine key and senior partners of information in the directory of network of peers, which seems to have solved the problem.

  Thanks for your thoughts.

  Tom

• A fatal error occurred when attempting to access the SSL server credential private key. The error code returned from the cryptographic module is 0x8009030D. The internal error state is 10001.

  Hello

  I just bought an HP computer, Windows 8 Pro, x64bit. I worked OK for a week and then started to freeze. It freezes all the time. I'll send the error message in the event log. I'd appreciate your help because I've had enough of this gel and I turn it works all the time.

  Log name: System
  Source: Schannel
  Date: 12/07/2013-12:55:12
  Event ID: 36870
  Task category: no
  Level: error
  Keywords:
  User: SYSTEM
  Computer: Aleksey
  Description:
  A fatal error occurred when attempting to access the SSL server credential private key. The error code returned from the cryptographic module is 0x8009030D. The internal error state is 10001.
  The event XML:
  http://schemas.Microsoft.com/win/2004/08/events/event">
   
     
      36870
      0
      2
      0
      0
      0 x 8000000000000000
     
      7179
     
     
      System
      Aleksey
     
   
   
      Server
      0x8009030d
      10001
   
  

  Thank you

  Hi Aleksey,

  I appreciate the efforts that you put to publish the query on this forum.

  Please help me with the following information about this issue:

  (1) is the computer that is connected to a domain network?

  (2) when exactly you receive the error message? It is by accessing any application?

  If the computer is connected to a domain network, I suggest you send the request on 8 Windows IT Pro. Check out the link:

  http://social.technet.Microsoft.com/forums/Windows/en-us/home?category=w8itpro

  Please let us know if the computer is not in a domain. We will be happy to help you come.

• Fichier.conf OTC has no details of the location of the ssl wallet file

  Hi gurus B2B.
  
  All by the HTTPS configuration had we observed that certain lines of were missing in the fichier.conf located in < Oracle_Home > \Apache\Apache\conf. The mentioned below, the lines are missing en.conf OTC but present OracleB2B dans.conf
  Location of the ssl file same portfolio is also absent in the fichier.conf of TBT as mentioned below.
  Can u please let us know as why these lines are missing or you manually add these lines when we do HTTPS on OTC?
  
  
  
  
  Listen 4444
  
  
  
  < VirtualHost default: 4444 >
  
  # General setup for the virtual host
  
  DocumentRoot "E:\Oracle_b2b\cachehome\Apache\Apache\htdocs".
  
  ServerName DSCP17506. TechMahindra.com
  
  ServerAdmin [email protected]
  
  ErrorLog "| E:\Oracle_b2b\cachehome\Apache\Apache\bin\rotatelogs logs/error_log 43200 "
  
  TransferLog "| E:\Oracle_b2b\cachehome\Apache\Apache\bin\rotatelogs logs/access_log 43200 "
  
  Port 443
  
  # The SSL engine switch:
  
  # Enable/disable SSL for this virtual host.
  
  SSLEngine on
  
  # Suite of SSL encryption:
  
  # List of encryption algorithms that the client is authorized to negotiate.
  
  All SSLCipherSuite!: ADH:! EXPORT56: + HIGH: + MEDIUM: + LOW: + SSLv2: + EXP
  
  # Server Wallet:
  
  # The server wallet contains the server private key certificate
  
  # and certificate trust. The value of SSLWallet in the portfolio directory
  
  # using the syntax: file: < path-to-door-currency-directory >
  
  SSLWallet file:E:\Oracle_b2b\cachehome\Apache\Apache\conf\ssl.wlt\default
  
  
  
  # Certificate lists CRL (CRL):
  
  # Set the path of the CA revocation where to find CA CRL to customer
  
  authentication # or alternatively a huge file containing all the
  
  # of them (file must be PEM encoded)
  
  # Note: Inside of the SSLCARevocationPath you need hash symlinks
  
  # to point to the certificate files. Use the provided
  
  # Makefile to update the hash symlinks after changes.
  
  #SSLCARevocationPath conf\ssl.crl
  
  #SSLCARevocationFile conf\ssl.crl\ca-bundle.crl
  
  
  
  # The authentication of the client (Type):
  
  # Client certificate verification type and depth. The types are
  
  # No, optional and require
  
  Need to #SSLVerifyClient
  
  
  
  # Access control:
  
  # With SSLRequire, you make a directory-based access control
  
  # on arbitrary complex Boolean expressions containing server
  
  # variable control and other directions of research. The syntax is a
  
  mixture of # between C and Perl. See the mod_ssl documentation
  
  # For more details.
  
  # < location / >
  
  #SSLRequire (% {SSL_CIPHER}! ~ m/^(EXP|)) (NULL)-/.
  
  # and eq % {SSL_CLIENT_S_DN_O} "powder of snake oil, Ltd.".
  
  # % {SSL_CLIENT_S_DN_OU} in {"staff", "CA", "Dev"}.
  
  # % {TIME_WDAY} > = 1 and % {TIME_WDAY} < = 5.
  
  (# % {TIME_HOUR} > = 8 and % {TIME_HOUR} < = 20).
  
  # % {REMOTE_ADDR} = ~ m/^192\.76\.162\. [0-9] + $/
  
  # < / location >
  
  
  
  # SSL engine options:
  
  # Set different options for the SSL engine.
  
  # o FakeBasicAuth:
  
  # The client X.509 translate basic authorization. This means that
  
  # the standard Auth/DBMAuth methods can be used for access control. The
  
  user name of # is 'a line' version of the X.509 client certificate.
  
  # Note that no password is obtained from the user. All entries in the user
  
  # file needs this password: 'xxj31ZMTZzkVA '.
  
  # o ExportCertData:
  
  # This operation exports two additional environment variables: SSL_CLIENT_CERT and
  
  # SSL_SERVER_CERT. These documents contain the PEM-encoded certificates of the
  
  # (still existing) server and client (existing only when customer)
  
  (# authentication is used). This can be used to import the certificates
  
  # in CGI scripts.
  
  # o StdEnvVars:
  
  # This operation exports the standard SSL/TLS related ' SSL_ * ' environment variables.
  
  # By default this export is disabled for performance reasons.
  
  # because the extraction step is an expensive operation and is usually
  
  # no need for static content. If we allow in general of the
  
  # to export queries CGI and SSI only.
  
  # o CompatEnvVars:
  
  # This operation exports obsolete environment for backward compatibility variables
  
  # for Apache-SSL 1.x, mod_ssl 2.0.x, Sioux 1.0 and Stronghold 2.x. use this
  
  # to ensure compatibility to the existing CGI scripts.
  
  # o StrictRequire:
  
  # This denies access when it is "SSLRequireSSL" or "SSLRequire" applied even
  
  # in a situation of "Satisfy", i.e. when it applied the access is denied
  
  # and no other module can change.
  
  # o OptRenegotiate:
  
  # This allows optimized connection handling SSL renegotiation when SSL
  
  # directives are used in the context of the directories.
  
  #SSLOptions FakeBasicAuth ExportCertData CompatEnvVars StrictRequire
  
  < files ~ "------." (cgi | shtml) $">"
  
  SSLOptions + StdEnvVars
  
  < / files >
  
  
  
  < directory "E:\Oracle_b2b\cachehome\Apache\Apache\cgi-bin" >
  
  SSLOptions + StdEnvVars
  
  < / Book >
  
  
  
  SetEnvIf User-Agent ".» * MSIE.*"nokeepalive ssl-unclean-shutdown
  
  # Server logging:
  
  # The House of a custom SSL log file. Use this setting when you want one
  
  # compact without error SSL logfile on a base of the virtual host.
  
  "CustomLog E:\Oracle_b2b\cachehome\Apache\Apache\logs\ssl_request_log"%t % {SSL_PROTOCOL} % {SSL_CIPHER} x \"%r\ x hour" %b ".
  
  < / VirtualHost >
  
  
  
  Thank you for your help in advance.
  
  Kind regards
  Priyanka

  Not sure that the CTA is expected to take in charge the entire feature. Please add entries manually. Let us know.

• How to export the bookmarks from Firefox 4.0b3

  How to export 4.0b3 favorite Internet Explorer, because the traditional "bookmarks" tab no longer appears?

  If you press the ALT key the traditional menu bar will appear temporarily. You can then use the method listed in the article export Internet Explorer Favorites .

• Win2k3 Server IIS SChannel event 36871 "a fatal error occurred when creating the SSL server credential information."

  To make a long story short, I went to use client software that I use a few times a week and it would not connect to the server, complaining not found or number of SSL.  When research various dcom, schannel errors errors in the event logs and a few others, I systematically over the last 24 hours cleared up the boot is so now clean (no time starting network on startup and no message on the service could not start).  It seems that something has happened a month ago after that the server crashed where at least the first DCOM messaged presented themselves, but everything has been working well until it didn't.  The dcom patches end up having to do with the ...\rsa\machinekeys (and the way that it) had a few "account unknown" in it, I cleaned everything that (at a time since I removed all items in this folder, but then put their subsequent return (by crushing all except 2 after creating a new certificate), had to reinstall virtual server and iis 6) , at some point as well.  In any case, I'm at the point where everything works (no event log errors/etc) from startup until you try to connect to the IIS 6 Server using https:... at this point, you get the event SChannel 36871 "a fatal error occurred when creating the SSL server credential information." (no additional information) is connected and the client browser cannot access the site (you can keep trying and it does not work but no event log entry more).  So that's where I'm sitting, http: works fine, https: No.  Certificate appears in the default Web site correct, said valid and possesses the private key, port 443 is there, all addresses by default, netstat shows port 443 same process id as the port 80.  I can't find a copy of SSLDiag do test to see if that prove something?

  So I need help what is not going to get this new job of fixing.  What should I do?

  Thank you!

  Hello

  Your question of Windows is more complex than what is generally answered in the Microsoft Answers forums. Appropriate in the TechNet forums. Please post your question in the TechNet forums.

  You can follow the link below to ask your question:

  http://social.technet.Microsoft.com/forums/en-us/winservergen/threads

  I hope that helps!

• How to install the ssl certificate in windows server 2008?

  Hello

  Can someone give me the steps to install the SSL certificate on my application hosted on windows server 2008 R2?

  Hello

  Although technet.microsoft.com should be the best forum for the problems of server below is a guide on how to install an SSL certificate.

  It will be useful.

  To install your newly acquired in IIS 7 SSL certificate, first copy the file somewhere on the server and then follow these instructions:

  1. Click on the start menu, go to administrativetools and click on Manager of Services Internet (IIS).
  2. Click the server name in the links on the left column. Double-click server certificates.

     

  3. In the Actions column to the right, click Complète Certificate Request...

     

  4. Click on the button with the three points, and then select the server certificate that you received from the certificate authority. If the certificate does not have a .cer file extension, select this option to display all types. Enter a friendly name that you can keep track of certificate on this server. Click OK.

     

  5. If successful, you will see your newly installed in the list certificate. If you receive an error indicating that the request or the private key is not found, make sure that you use the correct certificate and you install it on the same server that you generated the CSR on. If you are sure these two things, you just create a new certificate and reissue or replace the certificate. If you have problems with this, contact your certification authority.

     

  Bind the certificate to a Web site

  1. In the column of links on the left, expand the sites folder, and click the Web site that you want to bind the certificate to click links... in the right column.

     

  2. Click the Add... button.

     

  3. Change the Type to https , and then select the SSL certificate that you just installed. Click OK.

     

  4. You will now see the listed link for port 443. Click close.

     

  Install all the intermediate certificates

  Most of the SSL providers issue certificates of server out of an intermediate certificate so you will need to install the intermediate certificate on the server as well or your visitors will receive a certificate error not approved. You can install each intermediate certificate (sometimes there are more than one) by following these instructions:

  1. Download the intermediate certificate in a folder on the server.
  2. Double-click the certificate to open the certificate information.
  3. At the bottom of the general tab, click the install Certificate button to start the Certificate Import Wizard. Click Next.

     

  4. Select place all certificates in the following store , and then click Browse.

     

  5. Select the Show physical stores checkbox, then expand the Intermediate certificate authorities folder, select the below folder on the Local computer . Click OK. Click Next, and then click Finish to complete the installation of the intermediate certificate.

     

  You may need to restart IIS so that it starts the new certificate to give. You can verify that the certificate is installed correctly by visiting the site in your web browser using https rather than http.

  Links

  • Move or copy an SSL certificate on a Windows Server to another Windows Server
  • How to disable SSL 2.0 in IIS 7
  • How to configure the SSL in IIS 7.0
  • Video tutorials to install an SSL certificate in IIS 7 to NetoMeter

  Kind regards

  Joel

• Windows Vista mail program does not export the files all contacts

  After I exported my contacts from e-mail in vcf format windows in a new folder on my desktop, I noticed that NOT all contracts are present in the new folder.   If the contents of the folder, I show the long side windows messaging contacts which I exported the contacts I see some (to be precise, 256) are missing in the new folder. I exported 3 times, each time in a new folder and get the same results. I see that some of the missing files are group folders (apparently Windows Mail does not export to group files in vcf format) but the other files are simply not in the contents of the desktop folder.

  How can I get all the files AND folders in groups to export correctly?

  I was going to say that if you were interested in the migration of these contacts to another Vista computer, you can simply copy the file C:\Users\username\Contacts to your USB and then copy it to the other computer. Which retains all the attributes, including groups.

   

  For any other use, you're stuck fairly well with help of VCF or CSV format to export/import. Sorry, I have no idea why so many contacts are missing when you did.

   

  There is another method (roundabout). Install the free Windows Live Mail program, which will automatically import all contacts from Windows Mail. Be sure to select the option Live ID when prompted by the installer of Windows Live Mail. Therefore, you can keep all your contacts in perfect sync with other computers running Windows Live Mail, and you also have access to the contacts on any computer connected to the Internet by simply go tohttp://contacts.live.com and sign in with the same Live ID.

   

  Gary van, Microsoft MVP (Mail)

  "moiici" wrote in the new message: * e-mail address is removed from the privacy... *

  You said the following: " " Windows Mail is not for the export of groups. If you'd tell us what you intend to do with the exported contacts, we are able to offer a workaround solution. »

  My answer:

  I want to export my contacts to a USB key that I can take with me and be able to view them on any other PC. I have already established that if I save as the original file extension IE .contact ,, I'm NOT able to view on a computer that is running the Win XP operating system because who uses the email program Outlook Express and the file extension is .wab. I have not yet tried view the contacts vcf on Win7, but as I understand it, I should be able to view the contacts to vcf on that too.  My problem is that I'm missing 256 contacts after I export . I understand that windows Mail export NO groups, but there are only 9 groups from my list of contacts. WHY other contacts don't get exported? I'm doing something wrong and if so, what?

  I appreciate any help you can give.  Thank you and have a nice day.
  

  Gary van, MVP (Mail)