Nexus' software components have new names:

Nexus PRIME -> Smart ID Identity Manager
Nexus Certificate Manager -> Smart ID Certificate Manager
Nexus Hybrid Access Gateway -> Smart ID Digital Access component
Nexus Personal -> Smart ID clients

Go to Nexus homepage for overviews of Nexus' solutions, customer cases, news and more.


This article describes how to extract the certificate and private key from a pkcs12 container for use in Smart ID Digital Access component.

In this description, the container is named certificate.pfx and is of the type pkcs12.

  1. Enter each of the below steps in a terminal/command prompt with openssl on the path:

    Example: Enter these commands
    openssl pkcs12 -in certificate.pfx -out certificate.pem -clcerts -nokeys
    openssl pkcs12 -in certificate.pfx -out key.pem -nocerts -nodes
    openssl pkcs8 -topk8 -inform PEM -outform PEM  -in key.pem -out key.pkcs8 -v1 PBE-MD5-DES

    In the last step it is important to use a password for the target key, as it must be encrypted.

  2. When the steps are finished, upload the files certificate.pem and key.pkcs8 in the administration service and select the check boxes for each CA certificate in the chain.
  • No labels