while trying to execute below line in my command line, I am getting "pgp:export key error <3090, operation failed, item not found>" .

D:\pgp>pgp --export-key-pair Hzn --export-format pkcs12 --passphrase "Horizon123"

please help me on to resolve this issue.

Check this

Error 3090: operation failed when attempting to perform certain key operations

Hello Kannan,

Do we have the key Listed when we run list key command

D:\pgp --list-key

Are you looking to export the key with any Specific Export Format?

You can alsohave a look at the thread below.

http://www.symantec.com/connect/forums/export-public-key-certificate

Hi,

Yes, I am trying to export the key with the pkcs12 format.

So while doing that, I am getting the above mentioned error.

Is there any prerequisite I need to do for exporting this format.

Also when I try with the following command,

pgp --export "Hzn" --export-format pkcs12 --passphrase " xxx" --cert 0x93C2516

I am getting following error

0x93C2516:export key <3058:subkey not found>

Hello Kannan,

Can you run the below command and share the output .

pgp --export-key-pair "Hzn" --export-format pkcs12 --passphrase " xxx" --cert 0x93C2516

Hi,

I am getting the same kind of output.

0xD93C2516:export key pair (3058:subkey not found)

These are all the following steps I followed for generating pkcs12 format.

D:\PGP>pgp --gen-key Hzn --key-type RSA --encryption-bits 2048 --passphrase Hori

zon123 --signing-bits 2048

D:\PGP\pubring.pkr:generate key (0:file created successfully)

D:\PGP\secring.skr:generate key (0:file created successfully)

Hzn:generate key (2078:non-standard user ID)

Acquiring entropy from system state....done

Generating key Hzn

progress................................................................********

...............................................................................

...................******* done

0xD93C2516:generate key (0:key successfully generated)

Acquiring entropy from system state....done

Generating subkey

progress......******* ..........................................................

............................................******* done

0x0AAC6A5A:generate key (0:subkey successfully generated)

D:\PGP>pgp --list-keys --home-dir d:\pgp

Alg  Type Size/Type Flags   Key ID     User ID

----- ---- --------- ------- ---------- -------

*RSA4 pair 2048/2048 [VI---] 0xD93C2516 Hzn

1 key found

D:\PGP>pgp --export-key-pair "Hzn" --export-format pkcs12 --passphrase "Horizon123" --cert 0xD93C2516

You are attempting to export a PGP Key in a format that is only compatible with certificates.  That will not work.  They are not compatible formats/keyblocks.

What exactly are you wanting to accomplish?  If we had more information on that, we might have better luck providing direction.

I want to create a private key with pkcs12 format using PGP command.

The below command I tried

D:\PGP>pgp --export-key-pair "Hzn" --export-format pkcs12 --passphrase "Horizon123" --cert 0xD93C2516.

But getting the error as 0xD93C2516:export key pair (3058:subkey not found)

PGP Command Line cannot create certificates.  It creates PGP Keys.  PGP can import and use certificates, and this i why the functionality exists to expot in the certificate format,but PGP Command Line itself cannot create a pkcs12 certificate, and a PGP Key cannot be exported in that format.

PGP Command Line can be used to generate a Certificate Signing Request, which can then be submitted to a Certificate Authority for thm to generate a certificate.  It just does not generate certificates by itself.

The reason you get a "subkey not found" error is because it is looking for a certificate attached to the Hzn keypair named 0xD93C2516 and not finding it.

Mike,

Below command is not working inorder to create a certificate signing request. Also the 443 port is listening on the host as the error shown below.

D:\PGP>pgp --request-cert Hzn --cert-file certificate.csr --usp-server 10.70.53.51

pgp:MAK request certificate (3090:operation failed, the request was rejected by the server)

D:\PGP>pgp --request-cert Hzn --cert-file certificate.csr --usp-server 172.23.9.52

pgp:MAK request certificate (3013:Failed to connect to 172.23.9.52:443)

Please help us to resolve this error.

To create a CSR, it should be in aformat similar to this:

pgp --export <publickey> --export-format csr --passphrase

<passphrase> --city <city> --common-name <commonname> --

contact-email <emailaddr> --country <countrycode> --

organization <org> --organizational-unit (orgdept> --state

<state> --subject-alternative-name <subaltname> --key-usage

<keyusage> --extended-key-usage <exkeyusage> --basicconstraint

<basiccon>

That is from the PGP Command Line Guide, page 254: Creating a CSR using PGP Command Line.  The guide can be found here:

http://www.symantec.com/docs/DOC7066