Export the Futurex CNG TLS client PKI from Windows Certificate Store

in the previous section, we imported the tls ca certificate that signed the client and server tls certificates into the trusted root certification authorities windows certificate store then, we associated the signed futurex cng tls client certificate with its corresponding private key stored in windows certificate store in this section, we will use the export pfxcertificate powershell cmdlet to export the tls client pki as a pkcs #12 file in the next section, we will configure the pkcs #12 file inside the futurex cng configuration file (i e , fxcng cfg) and use it for the tls connection to the excrypt port on the hsm determine the thumbprint of the futurex cng certificate stored in windows certificate store to list certificates stored in the local machine store, run the folowing command in powershell powershell $ get childitem path cert \localmachine\my you should see output similar to the following text thumbprint subject \ addcfb89cb1cae80ab386007c200d7d31baafb14 cn=futurex cng copy the thumbprint value that you see to the clipboard export the futurex cng client pki using the export pfxcertificate powershell command run the command below, substituting "your certificate thumbprint here" and "your password here" with the actual thumbprint and password values powershell $ export pfxcertificate cert "cert \localmachine\my\your certificate thumbprint here" filepath "clientpki p12" password (convertto securestring string "your password here" force asplaintext)