Importing a personal certificate from a PKCS #7 file

The strmqikm (iKeyman) and runmqckm (iKeycmd) tools do not support PKCS #7 ( .p7b ) files. Use the runmqakm tool to import certificates from a PKCS #7 file on AIX®, Linux®, and Windows.

Use the following command to add a CA certificate from a PKCS #7 file:

runmqakm -cert -add -db filename -pw password -type cms -file filename
-label label

-db filename is the fully qualified file name of the CMS key database.

-pw password is the password for the key database.

-type cms is the type of the key database.

-file filename is the name of the PKCS #7 file.

-label label is the label that the certificate is assigned in the target database. The first certificate takes the label given. All other certificates, if present, are labeled with their subject name.

Use the following command to import a personal certificate from a PKCS #7 file:

runmqakm -cert -import -db filename -pw password -type pkcs7 -target filename
-target_pw password -target_type cms -label label -new_label label

-db filename is the fully qualified file name of the file containing the PKCS #7 certificate.

-pw password is the password for the PKCS #7 certificate.

-type pkcs7 is the type of the file.

-target filename is the name of the destination key database.

-target_pw password is the password for the destination key database.

-target_type cms is the type of the database specified by -target

-label label is the label of the certificate that is to be imported.

-new_label label

is the label that the certificate will be assigned in the target database. If you omit the -new_label option, the default is to use the same as the -label option.