Convert the SSL/TLS certificates to PKCS#12 format

System Administrator Guide for VSP One Block 85
Version
A0-05-4x
Audience
anonymous
Part Number
MK-26VSP1B030-03
ft:lastEdition
2026-06-22

If you are uploading an SSL/TLS certificate file in PEM format with a private key file to the storage system, you need to convert the SSL/TLS certificate file to PKCS#12 format. If you are uploading an SSL/TLS certificate in PEM or DER format alone or you are not uploading an SSL/TLS certificate, conversion is not required.

Note:
  • This procedure sets the private key file name to client.key and the SSL/TLS certificate file name to client.crt.
  • This procedure outputs an SSL/TLS certificate file in PKCS #12 format to c:\key.
  • If you use OpenSSL, use version 3.0.7 or later.
  • When creating a PKCS#12 file when FIPS mode is ON, do not grant MAC integrity with a message authentication code. (For example, if OpenSSL is used to create a PKCS12 file, the -nomac option is granted.) (OpenSSL with FIPS mode enabled does not support MAC integrity grants.)
  • The private key and SSL/TLS certificate file must be in the same folder.
  1. Open a command prompt with administrator permissions.
  2. Enter the following command:

    C:\key>c:\openssl\bin\openssl pkcs12 -export -in client.crt -inkey client.key -out client.p12

  3. Enter a password, which is used when uploading the SSL/TLS certificate in PKCS#12 format. You can use up to 128 alphanumeric characters and the following symbols: ! # $ % & ' ( ) * + , - . / : ; < = > ? @ [ \ ] ^ _ ` { | } ~
  4. The client.p12 file is created in the C:\key folder. This client.p12 file is the SSL/TLS certificate in PKCS#12 format.
  5. Close the command prompt.