WAS v8.5 > Secure applications > Secure communications

Extract a signer certificate from a personal certificate

Personal certificates contain a private key and a public key. We can extract the public key, called the signer certificate, to a file, then import the certificate into another keystore. The client requires the signer portion of a personal certificate for SSL communication.

Complete the following steps in the dmgr console:

1. Click...
   Security | SSL certificate and key management | Manage endpoint security configurations | {Inbound | Outbound} | ssl_configuration | Key stores and certificates | keystore | Additional Properties | Personal certificates | personal certificate | Extract

2. Type the full path for the certificate file name.

   The signer certificate is written to this certificate file.

3. Select a data type from the list.

4. Click Apply.

   The signer portion of the personal certificate is stored in the file provided. This signer can now be imported into other keystores.

Subtopics

• Extract certificate
  
• Extract signer certificate
  
• Retrieving signers using the retrieveSigners utility at the client
  
• Change the signer auto-exchange prompt at the client
  
• Extract certificate
  
• Extract signer certificate
  
• Retrieving signers using the retrieveSigners utility at the client
  
• Change the signer auto-exchange prompt at the client
  
• extractCertificate

Related concepts:
SSL configurations
Dynamic outbound selection of Secure Sockets Layer configurations
Keystore configurations for SSL
PersonalCertificateCommands command group for AdminTask

+

Search Tips   |   Advanced Search