# Security - Export Kerberos KeyTab from Windows Root CA

#### KeyTab Export

To export the KeyTab from the Windows CA server, in this case it is for KeyCloak mentioned [HERE](https://docs.sflservicesllc.com/books/security/page/security-windows-ldaps-cert "KeyTab Export")

Run this in PowerShell

```powershell
cd \temp
ktpass -princ HTTP/server.domain.com@SERVER.DOMAIN.COM -mapuser user@DOMAIN.COM -pass '' -crypto AES256-SHA1 -ptype KRB5_NT_PRINCIPAL -out keycloak.keytab
dir
```

This will show you the newly create KeyTab

[![image.png](https://docs.sflservicesllc.com/uploads/images/gallery/2026-02/scaled-1680-/image.png)](https://docs.sflservicesllc.com/uploads/images/gallery/2026-02/image.png)