> ## Documentation Index
> Fetch the complete documentation index at: https://docs.futurex.com/llms.txt
> Use this file to discover all available pages before exploring further.

# Configure IBM Db2

> Instructions to import PKCS #12 certificate into a local keystore for Db2.

Perform the following steps to import the PKCS #12 file into a local keystore:

<Steps>
  <Step>
    On the server where IBM Db2 is installed, create a working directory in the `C:` drive for the TLS certificates (such as `C:\Certs`).
  </Step>

  <Step>
    Copy the `ca-chain.pem` file into the folder.
  </Step>

  <Step>
    Open Command Prompt or **PowerShell**.
  </Step>

  <Step>
    Run the following command to create a local keystore:

    ```shell expandable lines wrap title="Shell" theme={null}
    "C:\Program Files\IBM\gsk8\bin\gsk8capicmd_64" -keydb -create -db C:\Certs\clientkeydb.p12 -pw safest -type pkcs12 -stash
    ```
  </Step>

  <Step>
    Run the following command to import the CA certificate bundle into the local keystore:

    ```shell expandable lines wrap title="Shell" theme={null}
    "C:\Program Files\IBM\gsk8\bin\gsk8capicmd_64" -cert -add -db C:\Certs\clientkeydb.p12 -stashed -label Root -file C:\Certs\ca-chain.pem
    ```
  </Step>

  <Step>
    Run the following command to import the PKCS #12 file containing the IBM Db2 client certificate and private key:

    ```shell expandable lines wrap title="Shell" theme={null}
    "C:\Program Files\IBM\gsk8\bin\gsk8capicmd_64" -cert -import -db C:\Certs\clientkeydb.p12 -stashed -file C:\Certs\pki.p12 -type pkcs12
    ```
  </Step>
</Steps>