Hi Dave, thanks for your reply.  yes you were correct, 2nd path was incorrect.  I found that if you're getting an 0x1731 error it's likely it's not finding the file....after getting about 17 of them!

If anyone is searching the kyrtool, I had to load the certificates in one by one, it wouldn't accept them in one big text file...oh and I had to use the 32 bit kyr tool despite my server being 64 bit!

i.e.

C:\NOTES>  kyrtool.exe import certs -i c:\temp\carootcert.crt -k c:\temp\mykeyring-sha2version.kyr
C:\NOTES>  kyrtool.exe import roots -i c:\temp\caIntermediate1.crt -k c:\temp\mykeyring-sha2version.kyr
C:\NOTES>  kyrtool.exe import roots -i c:\temp\caIntermediate2.crt -k c:\temp\mykeyring-sha2version.kyr
 type of thing

Hi Dave, thanks for your reply.  yes you were correct, 2nd path was incorrect.  I found that if you're getting an 0x1731 error it's likely it's not finding the file....after getting about 17 of them!

If anyone is searching the kyrtool, I had to load the certificates in one by one, it wouldn't accept them in one big text file...oh and I had to use the 32 bit kyr tool despite my server being 64 bit!

i.e.

C:\NOTES>  kyrtool.exe import certs -i c:\temp\carootcert.crt -k c:\temp\mykeyring-sha2version.kyr
C:\NOTES>  kyrtool.exe import roots -i c:\temp\caIntermediate1.crt -k c:\temp\mykeyring-sha2version.kyr
C:\NOTES>  kyrtool.exe import roots -i c:\temp\caIntermediate2.crt -k c:\temp\mykeyring-sha2version.kyr
 type of thing

Just in case anyone else has the error 'Access to data denied', it's because you added a password to your csr file (where you added your website name etc...).  It also have me an error of  'SECIssUpdateKeyringPrivateKey returned error 0x0103'  - seems like I was the only numb nut to do this.