Exporting and Importing FIPS-Compliant Certificates

If you know your existing Certificate keys were generated on a FIPS-compliant system and you want to use them after FIPS is enabled, you must export them before enabling FIPS and then import them after FIPS is enabled.

Similarly, if you plan to disable FIPS mode on your system and you want to use your FIPS-compliant certificates after disabling FIPS, you must export them before disabling FIPS and then import them after FIPS is disabled.

To export Certificates before the FIPS-mode transition

1. In the AMC, navigate to System Configuration > SSL Setting > SSL Certificates.

2. For each certificate to export, do the following:

   1. On the Certificates table, select a certificate and click the Export button.

   2. Enter a password for encrypting the exported .p12 file.

   3. Click the Save button.

To import certificates after the FIPS-mode transition

1. In the AMC, navigate to System Configuration > SSL Settings > SSL Certificates.

2. For each certificate to import:

   1. On the Certificates table, select the + (New) icon

   2. Select Import certificate from the dropdown list.

   3. Select the certificate file to import.

   4. Enter the password with which the .p12 file was encrypted.

   5. Click the Import button.