Renewal of the Maximo certificates is a frequent activity. I sometimes received the certificates in the PEM or CER format. IKEYMAN doesn’t open these file formats directly. On the web, many sources mentioned we can use OPENSSL tool to convert the PEM file to KDB file. From the official OpenSSL website, we can only download the source code, then have to build it to get the executable file. If you have GIT installed on your machine, it also include the openssl.exe file in the C:\Program Files\Git\usr\bin\ folder
The HTTP folder that is created after installing HTTP Server and Websphere contains the GSKCAPICMD tool which can be used to import PEM or CER file to an existing KDB file. Below is the example command to do it:
gskcapicmd -cert -add -db key.kdb -pw [keydb password] -label MaxCert1 -file maximocert.pem
