Exporting Self-Signed Private Key Certificates For Key Recovery - Novell IFOLDER 3.7 - ADMINISTRATION Administration Manual

2 Select Only the Certificate in PEM format.
3 Specify a password of minimum length of five characters.
4 Click Browse to find a location to save the file, then specify a filename for the certificate you
have created.
5 Click OK to save the certificate.
6 Convert the certificate in PEM format to DER format using OpenSSL command as given
below:
openssl x509 -in <certificate>.pem -inform PEM -out <certificate>.der -
outform DER
7 Copy the certificate in DER format to the location you have configured for loading Recovery
Agent Certificate during iFolder configuration.
If the certificate is expired, you need to load the new certificates again to this location.
For more information on this, see
page 58.
8 Restart the iFolder server to load the Recovery agent certificates.
6.6.5 Exporting Self-Signed Private Key Certificates For Key
Recovery
1 Click Export drop-down and select Export to File.
2 Select Certificate and the Key in PKCS12 Format.
3 Specify a new password and re-enter that for confirmation.
This password is used with the certificate and the keys exported to a file in XML format.
IMPORTANT: You must use a password different from the one you have used for certificate
creation.
4 Specify a filename for the certificate you have created and click Browse to find a location to
save the file.
5 Click OK to save the certificate.
84 OES 2 SP1: Novell iFolder 3.7 Administration Guide
"Path to the Recovery Agent Certificates (optional):" on