Skip to main content
When it is desired to open Apinizer Worker applications with HTTPS, it supports pfx and jks certificates. However, organizations may still want to upload pfx certificates in jks format. This document explains how this conversion can be done with the help of the “Keystore Explorer” program to help with this situation.

Converting Certificate Files to jks Format with Keystore Explorer (KSE)

Step 1: Opening PFX File

The pfx file is opened with KSE. Right-click on the file inside and select export key pair. Opening PFX File with KSE

Step 2: Export in PKCS12 Format

The keypair is exported in pkcs12 format with .p12 extension. Keypair Export

Step 3: Creating New JKS File

JKS type is selected with the new file creation option. JKS File Creation

Step 4: Importing Keypair

The .p12 file exported just now is imported into the created file with the import keypair option: Keypair Import Import Keypair Screen Import Keypair Details Note: An optional alias can be entered. The point to note is that if there is another certificate with the same alias, it should not be overwritten. Alias Input

Step 5: Setting Password

A new password is given, the point to note is that the given password and jks password must be the same, if there is no password, jks should also have no password. Password Setting

Step 6: Certificate Chain Export

Then right-click on the imported keypair and select export certificate chain option: Certificate Chain Export When exporting, the point to note is that Entire Chain and X.509 options must be selected. Export Options

Step 7: Certificate Chain Import

Then this exported certificate is imported into jks. An optional alias can be entered. The point to note is that if there is a certificate with the same alias, it should not be overwritten. Certificate Chain Import

Step 8: Final Status Check

What should be in the final state is: JKS File Final State

Step 9: Saving File

The file is saved with the password given to the keypair and closed. Saving File