Yes,

the hard way is to use gsk5-ikeyman:

http://blog.darrenduke.net/darren/ddbz.nsf/dx/exporting-domino-ssl-keyfiles-to-another-format-for-use-with-ihs-.htm

I have no idea why it doesn't work with the ikeyman on the domino machine. The gsk5-ikeyman only works on win32 machines, you should use winxp SP2... There are some tricks to let it run on win7, but only 32bit (--> google)

Another way is to reimport the original certifications in ikeyman.

http://www.bgs-ing.de/help/help9_admin.nsf/b3266a3c17f9bb7085256b870069c0a9/a327e5d08ec58c8785257bb90081d1e5?OpenDocument

(last sentence)

IHS is working on Windows 64bit. No problem here.

But IHS itself is a bag of hurt, as it has some unacceptable limitations.

1.) You can't install a Domino utility server with IHS. You can only install IHS when you choose "Customize server" at Domino installation. And then it is a Domino Enterprise server. So if you have licenses for an Utility server only, you're pissed off.

2.) Windows Single Sign-On won't work any more. IHS breaks SPNEGO.

http://www-01.ibm.com/support/docview.wss?crawler=1&uid=swg1LO78027

3.) IHS is only a reverse proxy. So it handles incoming connections only. Outgoing connections (e.g. webservices) are still limited to SSL 3.0.

So it is absolutely inevitable to have TLS support directly in Domino server.

Come on IBM, you already had 15 years to implement TLS in Domino!!!