Hi Cesar, Java can treat a .pfx file in the same way it treats a .p12 file -- as a keystore. There are a number of different ways to move things between keystores, but in this case I would recommend the following steps:
- Configure the .pfx as a keystore in WAS
- Use the "Import" button from the Personal Certificates panel of an existing keystore (e.g. CellDefaultKeyStore) to import the personal cert from the .pfx keystore
- Use the "Exchange Signers" button from the Keystores and Certificates panel, with the .pfx keystore and an existing keystore (e.g. CellDefaultTrustStore) selected, to move the signer(s) from the .pfx to the existing keystore
- Remove the .pfx keystore from the WAS configuration
Cheers,
Jackson
------------------------------
Jackson Leonard
------------------------------
Original Message:
Sent: Wed February 23, 2022 02:07 PM
From: Cesar Garcia
Subject: Import Personal and Signer Certificate from PFX File on WAS v7.0.0
I was wondering if there's a support link somewhere on how to import both the personal and signer certificate with a pfx file. I haven't seen too much on the web, other than when encountering issues with the 'unrestricted policy file'. This is for WebSphere version 7.0.0.
------------------------------
Cesar Garcia
------------------------------