How use privatekey in usbkey with mscapi provider?

Question

I write some code under jdk6,to show certificate in windows-my store,and use a certificate which common name is "3year" and it's privatekey is in a usbkey.I can show certificate ok,but can not get privatekey.
code:
          KeyStore ks = KeyStore.getInstance("Windows-MY","SunMSCAPI");
          ks.load(null );
          Enumeration<String> as1 = ks.aliases();
          while(as1.hasMoreElements()){
               String ss = as1.nextElement();
               X509Certificate cert = (X509Certificate)ks.getCertificate(ss);
               System.out.println( "SN =" + cert.getSerialNumber().toString(16) );
               System.out.println( "Issuer =" + cert.getIssuerDN().toString() );
               System.out.println( "subject=" + cert.getSubjectDN().toString() );
               System.out.println("-------------------------------------------");
          PrivateKey pk = (PrivateKey)ks.getKey("3year", "11111111".toCharArray());
          Cipher c2 = Cipher.getInstance("RSA/ECB/PKCS1Padding","SunMSCAPI");
          System.out.println(pk);
          c2.init(Cipher.DECRYPT_MODE, pk);
          c2.update(d1);
          byte[] d2 = c2.doFinal();
//          System.out.println( new String(d2) );
it print privatekey is null,but what?
I use PrivateKey pk = (PrivateKey)ks.getKey("3year", null),print privatekey is null also.

Answer 1

ghstark wrote:
windshome wrote:
...,but can not get privatekey.That is true and by design.I agree with this BUT I thought there was more to it. It was my understanding that, although one can't get the private key as a key usable by any provider, one is given a token that can be used by the SunMSCAPI provider in place of the private key. Therefore I don't understand why the OP gets 'null'.