CMS database option missing in iKeyman

The problem: After exporting SSL certificates from a web server to the KFC Keystore, I cannot create a new keystore database and import the new key using iKeyman because the CMS option is missing from the Key database type list.

The solution: If you are using Java Runtime Environment 6 or later in your IBM Tivoli Monitoring environment to run the iKeyman utility to create the CMS keystore database, you must first enable the CMS provider in the Java Runtime Environment security file.

To enable the CMS provider, add the following phrase to the CANDLE_HOME\TMAITM6\java60\jre\lib\security\java.security file:
security.provider.10=com.ibm.security.cmskeystore.CMSProvider