Previous
Left Arrow
Connect to a TrueNas Server using command prompt
Current Code Entry
Go Back To Code List
[CMD (Command Prompt)]
  • WACS - cannot export non-exportable private key

    Article Entry Date: February 14,2026 @ 03:18:48 / Last Updated On: February 14,2026 @ 01:56:51
How to update your SSL certificates in WACS so they are exportable. Allowing for the certs to move to other machines.
I've run into this issue a few times over the years.

Download the most recent version of WACS.«
Unzip the file, and edit the following file.
settings.json
Go to line: 108
"PrivateKeyExportable": false,
change this to true
"PrivateKeyExportable": true,
Save the file.
Open Command Prompt (CMD)
Navigate into the folder where you have it stored. I use my G drive.

C:\Windows\system32>G:
G:\>cd SSL
G:\SSL>wacs.exe
Once the program runs, choose
A: Manage renewals.
Next choose.
T: Run the renewal (force, no cache)
Once this is complete, you should be able to export your certificate.
Follow the steps in the next Article to Export, Copy to the network server, import, and then update IIS.
PowerShell - Export SSL Certificate, Copy to other Network machines, Import SSL Certificate on each machine«