To generate FIPS compliant pkcs12 file using Openssl
Originally Published: 2009-12-07
Last Modified: 2023-09-25
Article Number
Issue
In FIPS mode, when importing pkcs12 file created using openssl (with default options), R_PKCS12_DECODE returns error 10009 : NOT_AVAILABLE.
Cause
Resolution
openssl pkcs12 -export -in <your server cert>.pem -inkey <your server key>.pem -out mycert.p12 -descert
The -descert option will instruct openssl to encrypt pkcs12 certificates with triple DES.
Related Articles
Error "No appropriate protocol" in RSA Access Manager 6.2 45Number of Views AFX Connectors remain in a Deployed state and 'java.lang.SecurityException: Algorithm not allowable in FIPS140 mode: MD5' … 434Number of Views FIPS status of RSA Cloud Access Service components 356Number of Views RSA RADIUS Server File Customization 31Number of Views RSA RADIUS Overview 255Number of Views
Trending Articles
How to manipulate imported RSA SecurID Software Token(s) on an iPhone or iPad device RSA MFA Agent 2.5 for Microsoft Windows Installation and Administration Guide Failed to generate QR Code error when trying to activate software token using QR code in RSA Authentication Manager 8.x Se… RSA Authentication Manager 8.1 Quick Setup Fails with "Failed to Attach Replica Instance" User Application Portal
Don't see what you're looking for?