Express guide how to export private key from certificate storage marked during import as non-exportable.

• Download latest version of mimikatz – (mimikatz_trunk.zip)
• Extract mimikatz, open Powershell as Administrator and CD into extracted mimikatz. Then start mimikatz.exe

cd C:\Users\Administrator\Downloads\mimikatz_trunk\x64
.\mimikatz.exe

mimikatz # crypto::capi
mimikatz # crypto::certificates /systemstore=CERT_SYSTEM_STORE_LOCAL_MACHINE /export
mimikatz # quit

• You can find exported certificate with private key inside mimikatz folder.
• Password for import of the certificate: mimikatz