Hardware Security Module
ctcert c -t ec -Csecp256r1 -d1825d -k -lMasterAuditKey -s0
-xattributes.txt
Where:
ec
means create an Elliptic Curve key.
-Csecp256r1
means to create the key using this type of elliptic curve
1825d
creates a certificate which has a validity period of 1825 days from the date this command is run
MasterAuditKey
will be the label of the private key created on the HSM device.
-s0
means create this keypair /certificate on the HSM slot 0
attributes.txt
is the attributes file previously created.
You will be prompted to enter the user pin for the specified slot (i.e. slot 0 in this case).
2.
Extract the public certificate from the device and save it to a .pem file:
ctcert x -lMasterAuditCertificate -s0 -faudit_cert.pem
Where:
MasterAuditCertificate
is the name of the certificate created in the previous step, from the
label
field in the
attributes.txt
file.
-s0
specifies the slot where the certificate is located
audit_cert.pem
is the PEM file that will contain the public certificate
Note
Secure Auditing for IDENTIKEY Appliance only supports elliptic curve keys that are NIST P-256
compliant and stored in pkcs12 format.
IDENTIKEY Appliance Installation and Maintenance
107
