To generate FIPS compliant pkcs12 file using Openssl
Originally Published: 2009-12-07
Last Modified: 2023-09-25
Article Number
Issue
In FIPS mode, when importing pkcs12 file created using openssl (with default options), R_PKCS12_DECODE returns error 10009 : NOT_AVAILABLE.
Cause
Resolution
openssl pkcs12 -export -in <your server cert>.pem -inkey <your server key>.pem -out mycert.p12 -descert
The -descert option will instruct openssl to encrypt pkcs12 certificates with triple DES.
Related Articles
Error "No appropriate protocol" in RSA Access Manager 6.2 45Number of Views Windows Eventing Collector GENERAL ERROR Error: 12030 24Number of Views RSA Access Manager API cannot connect to 6.2 SP4 Servers due to SSLException illegal_parameter error 25Number of Views How to manage raw data cleanup in RSA Identity Governance & Lifecycle 481Number of Views FIM - Encryption Algorithms Q&A 28Number of Views
Trending Articles
How to manipulate imported RSA SecurID Software Token(s) on an iPhone or iPad device Manual synchronization introduced in RSA Authentication Manager 8.2 Service Pack 1 patch 6 Quick Setup Guide - Passwordless Authentication in Windows MFA Agent for Active Directory How to verify NTP server synchronization is not working in RSA Authentication Manager 8.x RSA Governance & Lifecycle 8.0.0 Installation Guide
Don't see what you're looking for?