How to convert a (PEM) X509 cert to PKCS#7 (.p7b) format?

Products

• SITEMINDER
• CA BCS Premier for CA Single Sign-On
• CA Single Sign On Agents (SiteMinder)
• CA Single Sign On Secure Proxy Server (SiteMinder)
• CA Single Sign On Federation (SiteMinder)

Issue/Introduction

Under SiteMinder documentation step "Install the Administrative UI" (Optional) Obtain and Import a Trusted Certificate into the Administrative UI, step 6 (h) says "adminui_cert.p7b
is the signed certificate request from the CA in PKCS#7 format. PKCS#7 format contains the server certificates, intermediate certificate (if any), and root certificates. "

The step requires adminui_cert.p7b in PKCS#7 format, however, Admin often receives a (PEM) X509 cert instead.

How to convert a (PEM) X509 cert to PKCS#7 (.p7b) format?

Environment

Release : 12.8.04

Resolution

First, open the (PEM) X509 cert in notepad program, ensure all the certificates are readable and listed in the correct order.

It should look like this:

-----BEGIN CERTIFICATE-----
MIIERT....(server certificate)

-----END CERTIFICATE-----

-----BEGIN CERTIFICATE-----
MIIERT....(intermediate certificate)

-----END CERTIFICATE-----

-----BEGIN CERTIFICATE-----
MIIERT....(root certificate)

-----END CERTIFICATE-----

This conversion process is in two parts:

1) Import your SSL certificate
2) Export your Certificate as PKCS 7

Part 1 of 2: Import your SSL certificate

1. From Internet Explorer, click Tools / Internet Options and click on the "Content" tab

2. Click on the "Certificates" button

3. Click on the "Import" button, the Certificate Import Wizard appears.

4. Browse to your Entrust SSL certificate and follow the rest of the Import Wizard choosing the defaults or browser to a particular store choice.

You should choose the SSL certificate file with entire chain in it, including the intermediate cert in the middle.

5. Click OK and Close Internet Explorer

Part 2 of 2: Export your certificate as a PKCS 7

1. From Internet Explorer, click Tools / Internet Options and click on the Content tab.

2. Click on the Certificates button.

3. Click on the "Other People" tab, or the store choice was made in previous import.

4. Choose your SSL certificate and click on "Export" button.

5. In the Certificate Export wizard, choose the option for "Cryptographic Message Syntax Standard PKCS #7 Certificate" and also checkmark "Include all certificates in the certification path if possible."

6. On the next screen, choose to save your file to your desktop. The file will save as a PKCS 7 with a .p7b file extension.

Additional Information

https://www.entrust.com/knowledgebase/ssl/how-do-i-convert-by-ssl-certificate-to-a-pkcs-7

https://techdocs.broadcom.com/us/en/symantec-security-software/identity-security/siteminder/12-8/installing/install-the-administrative-ui/optional-obtain-and-import-a-trusted-certificate-into-the-administrative-ui.html