To generate FIPS compliant pkcs12 file using Openssl
Originally Published: 2009-12-07
Article Number
Issue
In FIPS mode, when importing pkcs12 file created using openssl (with default options), R_PKCS12_DECODE returns error 10009 : NOT_AVAILABLE.
Cause
Resolution
openssl pkcs12 -export -in <your server cert>.pem -inkey <your server key>.pem -out mycert.p12 -descert
The -descert option will instruct openssl to encrypt pkcs12 certificates with triple DES.
Related Articles
User Access Review incorrect value for Rows/Page in RSA Identity Governance & Lifecycle Number of Views Status of "Step 11: Verify account attributes synchronization" is always Not Started in SecurID Governance & Lifecycle Number of Views Oracle AFX connector message "DH Parameters without subprime Q are not FIPS 140 approved" in RSA Governance & Lifecycle Number of Views gpg: no valid OpenPGP data found. gpg: decrypt_message failed eof Number of Views RSA SecurID Authenticate Device Registration Overview PDF Number of Views
Trending Articles
RSA MFA Agent 2.3.6 for Microsoft Windows Installation and Administration Guide RSA Authentication Manager Patch Updates How to verify that RSA Authentication Agent for Windows can perform challenge user lookups across different Active Directo… Troubleshooting RSA MFA Agent for Microsoft Windows Replication Showing Internal Replication Error During Upgrade to RSA Authentication Manager 8.2
Don't see what you're looking for?
