How to transform your certificate to a pvk + spc combination.

Secure SSL Certificates | Home | Contact Us

Customer Support - Please make your selection from the tabs below.

Product Links
SSL Certificates
ObjectSign
PersonalSign
SSL Managed Service
CorporateRA

Support Quick Links
CSR Generation
SSL Install
Contact us

Get the GlobalSign
SSL Secure Site Seal

Customer Support > ObjectSign Code Signing Certificates >How to transform your certificate to a pvk + spc combination.

Export your certificate to a pfx file (be sure to check "Include all certificates in the certification path if possible").Click here for export instructions

Install openssl. You can find compiled binaries on www.openssl.org

Extract your private key from the pfx file.

->openssl pkcs12 -in <pfx-file> -nocerts -nodes -out <pem-key-file>

The pfx password will be asked.

Download the pvk transform utility. This file can be found at

    http://www.globalsign.com/support/code-signing/PVK.zip

-> pvk -in <pem-key-file> -topvk -strong -out <pvk-file>

Extract your certificates from the pfx file.

openssl pkcs12 -in <pfx-file> -nokeys -out <pem-certs-file>

The pfx password will be asked.

Transform your pem file to a spc file

->openssl crl2pkcs7 -nocrl -certfile <pem-certs-file> -outform DER -out <spc-file>

How to combine spc and pvk to a keystore certificate

Download and install the pvkimport utility here:

    http://office.microsoft.com/downloads/2000/pvkimprt.aspx

To export it to a pfx (pkcs12) use this command

pvkimprt -PFX <spc-file> <pvk-file> <pfx-file>

To import it immediately to your keystore = registry do this:

pvkimprt -import <spc-file> <pvk-file>

You will receive this screen (type in your password)

Click on next to continue

Let the system decide the location

and click on finish

Your certificate should now be available to your system. You can sign with Signcode from Microsoft.

	Home \| SSL Certificates \| Products \| Enterprise Solutions \| Partners \| Customer Support \| About GlobalSign \| Customer Login	© GlobalSign. All rights reserved.
	GlobalSign Inc (a member of GMO Internet Inc group TSE:9449) offers online security services and has been operating as a trusted Root Certification Authority for over 10 years. GlobalSign Certificates are trusted by all popular Browsers, Operating Systems, Devices and Applications and include SSL, SSL Certificates, Extended SSL Certificates, Code Signing, Personal Digital IDs, Enterprise Digital IDs, internal PKI & Microsoft CA root signing.