1. Essentials Guide
  2. Transport Layer Security
  3. TLS Configuration Process
  4. Certificate Configuration Process
  5. PKCS #12 Container Import and Export Capability
  6. Export to a PKCS #12 File

Export to a PKCS #12 File

You can export a local entity certificate from the CSM/SLRM to a PKCS #12 file by way of the ACLI.

Note:

When prompted for password and passphrase, use the ones that you entered in system-config.
  1. Run the export-certificate command. 
    export-certificate <pkcs#12> <certificate-record-name> [pkcs-12-file-name]
    where
    • Certificate-record-name—the name of the local entity certificate record that you want to export.
    • pkcs12-file-name—the name of the target PKCS #12 file. The system creates the export file in the /opt directory. Use either .pfx or .p12 for the file extensions. 
    ORACLE# export-pkcs12 masterca certificate.pfx
Creating pkcs12 for certificate-record: (masterca)
PKCS12 Certificate(s) exported successfully....
ORACLE#

    This command is supported only when using the RSA key exchange, not when using the Diffie-Hellman key exchange.