1
In Excrypt Manager, connect to the HSM and log in with the default Admin identities.
2
Go to the Key Management window to access information on the RSA keys and the certificates created by CertAgent on the HSM.
1
After you use FXCLI to connect and log to the HSM, run the keytable list command:
This example remoted the externalData and pkcs11Attributes fields and associated values to shorten the command output.
FXCLI
keytable list
result:
status: success
statusCode: 0
slots:
-
slot: 0
type: "key"
name: ""
kcv: "BFE0"
algorithm: RSA
bits: 3072
usage: Encrypt,Decrypt,Sign,Verify,Wrap,Unwrap
startValidity: "1971-01-01 00:00:00"
endValidity: "2999-01-01 00:00:00"
exportable: false
clearExportable: false
passwordExportable: false
requiresAuth: true
modifiable: true
-
slot: 1
type: "key"
name: ""
kcv: "7C0E"
algorithm: RSA
bits: 3072
usage: Encrypt,Verify,Wrap
startValidity: "1971-01-01 00:00:00"
endValidity: "2999-01-01 00:00:00"
exportable: true
clearExportable: false
passwordExportable: false
requiresAuth: true
modifiable: true
-
slot: 2
type: "certificate"
name: "/C=US/O=ISC/CN=CertAgent 7.0.8 Root CA 0DB4/CN=CertAgent 7.0.8 System Key 0DB4"
fingerprint: "27262907210242616B91281FC6405DD82EE91B35"
algorithm: RSA
bits: 3072
usage: Sign,Verify,Wrap,Unwrap
startValidity: "2021-01-21 19:54:44"
endValidity: "2026-01-21 19:54:44"
exportable: true
clearExportable: false
passwordExportable: false
requiresAuth: false
modifiable: true
-
slot: 3
type: "key"
name: ""
kcv: "6840"
algorithm: RSA
bits: 3072
usage: Encrypt,Decrypt,Sign,Verify,Wrap,Unwrap
startValidity: "1971-01-01 00:00:00"
endValidity: "2999-01-01 00:00:00"
exportable: false
clearExportable: false
passwordExportable: false
requiresAuth: true
modifiable: true
-
slot: 4
type: "key"
name: ""
kcv: "7BDA"
algorithm: RSA
bits: 3072
usage: Encrypt,Verify,Wrap
startValidity: "1971-01-01 00:00:00"
endValidity: "2999-01-01 00:00:00"
exportable: true
clearExportable: false
passwordExportable: false
requiresAuth: true
modifiable: true
-
slot: 5
type: "certificate"
name: "/C=US/O=ISC/CN=CertAgent 7.0.8 Root CA 0DB4/CN=CertAgent 7.0.8 Root CA 0DB4"
fingerprint: "D7AE7F335BCD02CC3D1433BF60F66113FBB4339E"
algorithm: RSA
bits: 3072
usage: Sign,Verify
startValidity: "2021-01-21 19:54:46"
endValidity: "2026-01-21 19:54:46"
exportable: true
clearExportable: false
passwordExportable: false
requiresAuth: false
modifiable: true
-
slot: 6
type: "key"
name: ""
kcv: "F1FB"
algorithm: RSA
bits: 3072
usage: Encrypt,Decrypt,Sign,Verify,Wrap,Unwrap
startValidity: "1971-01-01 00:00:00"
endValidity: "2999-01-01 00:00:00"
exportable: false
clearExportable: false
passwordExportable: false
requiresAuth: true
modifiable: true
-
slot: 7
type: "key"
name: ""
kcv: "2CBF"
algorithm: RSA
bits: 3072
usage: Encrypt,Verify,Wrap
startValidity: "1971-01-01 00:00:00"
endValidity: "2999-01-01 00:00:00"
exportable: true
clearExportable: false
passwordExportable: false
requiresAuth: true
modifiable: true
-
slot: 8
type: "certificate"
name: "/C=US/O=ISC/CN=CertAgent 7.0.8 Root CA 0DB4/CN=centos6.linuxvmimages.local"
fingerprint: "29E36582281B7029E468E8FA6E4139077996851B"
algorithm: RSA
bits: 3072
usage: Sign,Verify,Wrap,Unwrap
startValidity: "2021-01-21 19:54:47"
endValidity: "2026-01-21 19:54:46"
exportable: true
clearExportable: false
passwordExportable: false
requiresAuth: false
modifiable: true
If all nine keys are present, the installation succeeded.