I'm trying to use a multipurpose certificate on an infrastucture that contains a Domino 7 server. To accomplish this, I tried:

  1. Generate a CSR outside of Domino: I'm able to use the produced certificate everywhere but not on Domino because it requires to generate a keyring and the correspondent CSR
  2. Generate the keyring and the CSR in Domino: everithing (services) work well in Domino, but I'm not able to extract the private key to use the certificate for other purposes

For the attempt 2. I found that someone used a tool named IKEYMAN from IBM; it's been quite difficult to find a download for IKEYMAN. IKEYMAN can open a Domino keyring and export it to KDB format or in a .class; I was not able to use any of the formats IKEYMAN exports to extract the private key. Someone on Lotus forums says that he did the trick, but I'm missing something: in the keyring I was not able to find any private keys.

My question is: can I extract the private key from a Domino keyring? In the case of the need to use a tool, where exactly can I find this tool?

migrated from superuser.com Aug 21 '12 at 20:05

This question came from our site for computer enthusiasts and power users.

  • 1
    I haven't foun an answer... I ended up with the 'certificate copy' function provided by the CA supplier: different copies of the same certificate produced from different CSRs. I agree for the move to SF. – Andrea Colleoni Aug 21 '12 at 19:49

Here is the link to IBM's public Download site.. Hope it helps


  • For me IKEYMAN does not start. When I run runikeyman.bat from command prompt it just shows the path etc and returns to "C:\Program Files\IBM\GSK5>". Nothing is launched. I've tried many instructions including this one www-10.lotus.com/ldd/nd85forum.nsf/5/… but the result is always the same. I've tried it on 3 PCs and one server (Win 10, 7 and 2003). Any ideas? – Panu Haaramo Mar 7 '16 at 10:27

IBM support helped me on this one.

  1. Download the new key ring tool and save the appropriate version to program directory of your Notes client.

  2. kyrtool show keys -k <path to keyring file>

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.