You need to update a certificate in your Lotus Domino keyring (*.kyr) but you lost the keyring password. Is there a way to recover it?

To recover a Lotus Domino keyring password you need a Lotus Domino server where you have admin access to and the *.sth file which fits the *.kyr file. If you have both you can perform the following steps:

1.) bring down the HTTP task via:

tell http quit

2.) open the domino console and enter:

set config DEBUG_SSL_ALL=3

3.) and

set config SSL_TRACE_KEYFILEREAD=1

4.) if you now bring back your http task via:

lo http

you should see a line similar to:

ReadKeyfile> Recovering password from stash file

ReadKeyfile> Password is <......>