I understand AD uses certificates to do replication, client authentication and such (a link to details would be nice to broaden my KB on AD certs). I can find the cert that AD uses by going to the certificates mmc and looking under the local computer personal certs. The one listed for client, server and smart is the one. Question I cant seem to find the answer to;
Is the private key exportable (the option is greyed out, "not exportable")? We have a central CA, but have done nothing special to the AD side, it should be 'out-of-the-box'
BlankMonkey