Preparing a certificate file for secure connections from macOS

If you need to connect to a remote system over a secure connection on macOS, and your certificate file is in .p12 format, you must convert it to .pem format and split it into a certificate file and a key file. Do these steps:

To generate the certificate file, issue this command from a macOS command shell. In this command, replace nameofp12certificate with the file name of your .p12 certificate file, and replace nameofpemcertificate with the file name you want to use for the certificate file in .pem format.
```
openssl pkcs12 -in nameofp12certificate.p12 -out nameofpemcertificate.pem -clcerts -nokeys
```
The openssl command prompts you for the password for the p12 certificate as the encryption password.
To generate the key file, issue this command from a macOS command shell. In this command, replace nameofp12certificate with the file name of your .p12 certificate file, and replace nameofpemkey with the file name you want to use for the key file in .pem format.
```
openssl pkcs12 -in namofp12certicate.p12 -out nameofpemkey.pem -nocerts -nodes
```
The openssl command prompts you for the password for the p12 certificate as the encryption password.
In the Remote Connection Emulator profile editor, enter these two files into the Certificate file and Key file fields and enter the encryption password into the Certificate password field. For more information about the security fields in the profile editor, see macOS Properties.