Good afternoon,

We had a problem with GIM certificates, which was solved after installing patch 11.0p488_GIM-Certifcates-Fix.
After that when outputting the command: show certificate warn_expired
I see the following message: 
Warning:
The JKS keystore uses a proprietary format. It is recommended to migrate to PKCS12 which is an industry standard format using "keytool -importkeystore -srckeystore /opt/IBM/Guardium/etc/saml/.samlkeystore -destkeystore /opt/IBM/Guardium/etc/saml/.samlkeystore -deststoretype pkcs12".

When trying to execute the specified command, an error appears because this command does not exist: ERROR: Command 'keytool' unknown.
Can you please tell me if this command should be executed and how to do it?
Will GIMs work if not converted to another format?

I also saw that patch 11.0p489_GIM-Certifcates-Fix was released yesterday, what certificates does it change, as the release notes show the same information as the previous patch.

Hello,

We also have that Warning:
The JKS keystore uses a proprietary format. It is recommended to migrate to PKCS12 which is an industry standard format using "keytool -importkeystore -srckeystore /opt/IBM/Guardium/etc/saml/.samlkeystore -destkeystore /opt/IBM/Guardium/etc/saml/.samlkeystore -deststoretype pkcs12".

We have it for a few months now, already opened a case about it and IBM said there is no need to do anything about that warning and that would be fixed on a future bundle patch.

But as usual, still no bundle or anything regarding that warning from IBM side. Maybe in a few more months we will get it patched.

Best Regards,

Pedro Marques