Digital Certificates › General Rules › Extract Private Keys

Extract Private Keys

An application can extract the private key from a user certificate if the following conditions are met:

• The caller's user ID is the user ID associated with the certificate
• The certificate is connection to its key ring with the PERSONAL usage option

An application can extract the private key from a CERTAUTH or CERTSITE certificate if the following conditions are met:

• The caller's user ID has at least CONTROL access to the IBMFAC resource IRR.DIGTCERT.GENCERT
• The certificate is connection to its key ring with the PERSONAL usage option