(Java) Import a PFX/P12 into the Windows Certificate Stores

Demonstrates how to import the certificates contained in a .pfx/.p12 to the Windows certificate stores.

Note: This example requires Chilkat v11.0.0 or greater.

Chilkat Java Downloads Java Libs for Windows, MacOS, Linux, Alpine Linux Java Libs for Android

import com.chilkatsoft.*;

public class ChilkatExample {

  static {
    try {
        System.loadLibrary("chilkat");
    } catch (UnsatisfiedLinkError e) {
      System.err.println("Native code library failed to load.\n" + e);
      System.exit(1);
    }
  }

  public static void main(String argv[])
  {
    boolean success = false;

    CkPfx pfx = new CkPfx();

    success = pfx.LoadPfxFile("qa_data/pfx/example.p12","p12Password");
    if (success == false) {
        System.out.println(pfx.lastErrorText());
        return;
        }

    // See the online reference documentation for more information about the ImportToWindows method.

    // Mark imported privae keys as exportable.
    boolean exportable = true;

    // If userProtected is true, the user is to be notified through a dialog box or other method when certain attempts to use this key are made. 
    boolean userProtected = false;

    // If machineKeyset is true, the private keys are stored under the local computer and not under the current user. 
    boolean machineKeyset = false;

    // If allowOverwriteKey is true, allow overwrite of the existing key. 
    boolean allowOverwriteKey = false;

    // If allowExport is true, then the imported key can later be exported back to a PFX.
    // (It also allows for applications to directly access the private key material.)
    boolean allowExport = true;

    // Indicate where to import types of certs.
    String leafStore = "My";
    String intermediateStore = "CertificationAuthority";
    String rootStore = "AuthRoot";

    success = pfx.ImportToWindows(exportable,userProtected,machineKeyset,allowOverwriteKey,allowExport,leafStore,intermediateStore,rootStore,"");
    if (success == false) {
        System.out.println(pfx.lastErrorText());
        return;
        }

    // Show information about the certificates imported
    CkJsonObject json = new CkJsonObject();
    pfx.GetLastJsonData(json);

    json.put_EmitCompact(false);
    System.out.println(json.emit());

    // Sample LastJsonData:

    // {
    //   "exportable": true,
    //   "userProtected": false,
    //   "machineKeyset": false,
    //   "allowOverwriteKey": false,
    //   "allowExport": true,
    //   "key": [
    //     {
    //       "name": "{F09B755A-1E90-444D-9851-02B86CA14961}",
    //       "storageProvider": "Microsoft Software Key Storage Provider"
    //     }
    //   ],
    //   "cert": [
    //     {
    //       "DN": "...",
    //       "type": "intermediate",
    //       "storeName": "CertificationAuthority",
    //       "imported": true
    //     },
    //     {
    //       "DN": "...",
    //       "type": "root",
    //       "storeName": "AuthRoot",
    //       "imported": true
    //     },
    //     {
    //       "DN": "....",
    //       "type": "leaf",
    //       "storeName": "My",
    //       "keyContainer": "{345D4EAD-B8DD-4150-9A1F-4BC6437E77A2}",
    //       "machineKeyset": true,
    //       "imported": true
    //     }
    //   ]
    // }

    System.out.println("Success.");
  }
}