Server Fault is a question and answer site for system and network administrators. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

I'm trying to use a multipurpose certificate on an infrastucture that contains a Domino 7 server. To accomplish this, I tried:

  1. Generate a CSR outside of Domino: I'm able to use the produced certificate everywhere but not on Domino because it requires to generate a keyring and the correspondent CSR
  2. Generate the keyring and the CSR in Domino: everithing (services) work well in Domino, but I'm not able to extract the private key to use the certificate for other purposes

For the attempt 2. I found that someone used a tool named IKEYMAN from IBM; it's been quite difficult to find a download for IKEYMAN. IKEYMAN can open a Domino keyring and export it to KDB format or in a .class; I was not able to use any of the formats IKEYMAN exports to extract the private key. Someone on Lotus forums says that he did the trick, but I'm missing something: in the keyring I was not able to find any private keys.

My question is: can I extract the private key from a Domino keyring? In the case of the need to use a tool, where exactly can I find this tool?

share|improve this question

migrated from Aug 21 '12 at 20:05

This question came from our site for computer enthusiasts and power users.

I haven't foun an answer... I ended up with the 'certificate copy' function provided by the CA supplier: different copies of the same certificate produced from different CSRs. I agree for the move to SF. – Andrea Colleoni Aug 21 '12 at 19:49

Here is the link to IBM's public Download site.. Hope it helps

share|improve this answer
For me IKEYMAN does not start. When I run runikeyman.bat from command prompt it just shows the path etc and returns to "C:\Program Files\IBM\GSK5>". Nothing is launched. I've tried many instructions including this one… but the result is always the same. I've tried it on 3 PCs and one server (Win 10, 7 and 2003). Any ideas? – Panu Haaramo Mar 7 at 10:27

IBM support helped me on this one.

  1. Download the new key ring tool and save the appropriate version to program directory of your Notes client.

  2. kyrtool show keys -k <path to keyring file>

share|improve this answer

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.