Exporting with the tool pk12util

Using pk12util enabless you to export certificates and keys from your internal database and import them into an internal or external PKCS #11 module. You can always export certificates and keys to your internal database, but most external tokens will not allow you to export certificates and keys. By default, pk12util uses certificate and key databases named cert8.db and key3.db.

To Export a Certificate and Key From an Internal Database

1. Go to the server-root/alias directory containing the databases.

2. Add server-root/bin/proxy/admin/bin to your PATH.

3. Locate pk12util in server-root/bin/proxy/admin/bin.

4. Set the environment.

   • On UNIX:

     setenv LD_LIBRARY_PATH/server-root/bin/proxy/lib:${LD_LIBRARY_PATH}

   • On Windows, add it to the PATH

     LD_LIBRARY_PATH server-root/bin/proxy/bin

     You can find the PATH for your computer listed under: server-root/proxy-admserv/start.

5. In a terminal window, type pk12util.

   The options will be listed.

6. Perform the actions required.

   For example, in UNIX type

   pk12util -o certpk12 -n Server-Cert [-d /server/alias] [-P https-test-host]

7. Type the database password.

8. Type the pkcs12 password.