Help for Export Keys

To export a key pair or certificate:

1. Verify that the Current key ring shown on the form is the key ring you want to work with. If it is not the right key ring, go to the Security Configuration form and make the key ring you want to work with the current key ring. Then, return to this form and fill it in.
2. In the Keys and Certificates, click the key pair or certificate that you want to export. Trusted root keys are designated with an "*". Note that:
   • You may need to transfer a key pair for your own use; however, keep in mind that a key pair contains the private key, which should never be transmitted to others.
   • The private key is what the server uses to sign messages and also to decrypt messages that clients have encrypted with the server's public key.
   • If you are acting as your own CA for a private Web network, the CA private key is used to sign the certificates you process as CA.
   • If the CA private key is compromised, then all the certificates issued by you as a CA are also compromised.
3. Fill in the following fields:
   • Export to file - the name of the file to which you want to export the key pair or certificate.
   • Armor password - a password used to encrypt the export file. You will have to enter the password again for verification.
4. Click Apply to update your server with the changes you made to the form
   or
   Click Reset to return to the values that were on the form before you made the changes.

Note: The key ring that contains the keys the server will use for secure communications should be the current key ring. If you need to make the server's key ring the current key ring after you process this form, use the Security Confirmation form.