Whats the MAC it keeps saying is OK?
A. This is an integrity check. When used with the correct password it can be used to verify that the file has not been corrupted. My pkcs12 application (and NS/MSIE) currently uses the same password for integrity (MAC) and privacy (encryption) by default. If you use the twopass option you can set and input separate passwords: such files cannot be imported into current versions of MSIE or NS.