To generate FIPS compliant pkcs12 file using Openssl
Originally Published: 2009-12-07
Article Number
Issue
In FIPS mode, when importing pkcs12 file created using openssl (with default options), R_PKCS12_DECODE returns error 10009 : NOT_AVAILABLE.
Cause
Resolution
openssl pkcs12 -export -in <your server cert>.pem -inkey <your server key>.pem -out mycert.p12 -descert
The -descert option will instruct openssl to encrypt pkcs12 certificates with triple DES.
Related Articles
User Access Review incorrect value for Rows/Page in RSA Identity Governance & Lifecycle Number of Views Oracle AFX connector message "DH Parameters without subprime Q are not FIPS 140 approved" in RSA Governance & Lifecycle Number of Views Status of "Step 11: Verify account attributes synchronization" is always Not Started in SecurID Governance & Lifecycle Number of Views gpg: no valid OpenPGP data found. gpg: decrypt_message failed eof Number of Views FIM - Encryption Algorithms Q&A Number of Views
Trending Articles
RSA MFA Agent 2.3.6 for Microsoft Windows Installation and Administration Guide RSA Authentication Manager 8.7 SP2 Setup and Configuration Guide How to Download OTP Token Seed Files from myRSA Download RSA SecurID Access Cloud User Event audit logs using Cloud Administration REST API CLU How to factory reset an RSA Authentication Manager 8.x hardware appliance without a factory reset button from the Operatio…
Don't see what you're looking for?
