To import, the private key and cert must be encrypted using the system
password.  On export, the cert/key are encrypted with the system password.