Federation Manager Installation and Upgrade Guide › Key Tool Reference › Export a Certificate or Private Key

Export a Certificate or Private Key

Use the export option to export a certificate or private key to a file.

Consider the following items:

• Certificate data is exported using PEM encoding.
• Private key data is exported using DER encoded PKCS8 format.

Arguments for this option include the following:

-accessLegacyKS

Specifies that the option applies to the legacy smkeydatabase. If you do not supply this argument, the option applies to the r12.5 certificate data store.

-alias alias

(Required) Identifies the certificate or key to be exported.

-outfile out_file

(Required) Specifies the full path to the file to which the data is exported.

-type (key|cert)

(Optional) Specifies whether a certificate or key is being exported.

Default: certificate.

-password password

Required only when exporting a private key. Specifies the password that is used to encrypt the private key when exported. You do not need a password to export the certificate holding the public key because certificates are exported in clear text.

To add this private key back to the certificate data store, use the addPrivKey option with this password.