If you need to migrate keys and certificates stored in an existing key database into a z/OS® PKCS #11 token, follow these steps

1. Export the certificate/private key to a password protected PKCS #12 file using gskkyman. See Copying a certificate with its private key for details about the steps for exporting certificates/private keys to a PKCS #12 file.
2. Import the certificate/private key from the PKCS #12 file into the z/OS PKCS #11 token using gskkyman. See Importing a certificate from a file with its private key for more information.