Extracting CA Certificate from Access for Windows

Answer

The tool that we are going to use is CWBCOSSL..  On a local PC where the SSL Telnet Certificate Authority Certificate (Download CA) has already been done, from the Window button you can select the "Search programs and files" and type in CWBCOSSL and it will find the application.  When you open it, click OK on the pop-up panel.

Then the CwbCOSSL - IBM i Access Certificate Authority Downloader will be open.  Near the bottom of that utility there are buttons to launch SSL related programs.  Click on the "PC Key Mgt." button.

This will launch the IBM Key Management tool.  From that tool click on "Key Database File" and then select "Open".  Click OK on the Open dialog.

In the password prompt type in    "ca400"  and press OK.

In the middle of the screen, just above the blank white space, there will be a heading of "Key database content".  Under then select the option for Signer Certificates.

This should bring up a list of certificates and you should see the one downloaded for the local IBM i OS system.  Highlight that certificate and on the right hand side select the option for "Extract"

Click the "Browse" option and select an easily found location like the Desktop and enter a meaningful file name like "sysname_Access_CA.arm"  where sysname is replaced by the IBM i OS system name.

Now this .arm file is what can be imported on the remote PCs using the same CWBCOSSL utility.

In order to do that, follow the instructions in this Technote:

http://www-01.ibm.com/support/docview.wss?uid=nas8N1012133