Skip to main content
Choose one of the following methods to log in to the HSM and verify that the CertAgent keys and certificates are generated and stored on the HSM: Excrypt Manager:
1
In Excrypt Manager, connect to the HSM and log in with the default Admin identities.
2
Go to the Key Management window to access information on the RSA keys and the certificates created by CertAgent on the HSM.
FXCLI:
1
After you use FXCLI to connect and log to the HSM, run the keytable list command:
This example remoted the externalData and pkcs11Attributes fields and associated values to shorten the command output.
FXCLI
  keytable list
  result:
      status: success
      statusCode: 0
  slots:
      -
          slot: 0
          type: "key"
          name: ""
          kcv: "BFE0"
          algorithm: RSA
          bits: 3072
          usage: Encrypt,Decrypt,Sign,Verify,Wrap,Unwrap
          startValidity: "1971-01-01 00:00:00"
          endValidity: "2999-01-01 00:00:00"
          exportable: false
          clearExportable: false
          passwordExportable: false
          requiresAuth: true
          modifiable: true   
      -
          slot: 1
          type: "key"
          name: ""
          kcv: "7C0E"
          algorithm: RSA
          bits: 3072
          usage: Encrypt,Verify,Wrap
          startValidity: "1971-01-01 00:00:00"
          endValidity: "2999-01-01 00:00:00"
          exportable: true
          clearExportable: false
          passwordExportable: false
          requiresAuth: true
          modifiable: true        
      -
          slot: 2
          type: "certificate"
          name: "/C=US/O=ISC/CN=CertAgent 7.0.8 Root CA 0DB4/CN=CertAgent 7.0.8 System Key 0DB4"
          fingerprint: "27262907210242616B91281FC6405DD82EE91B35"
          algorithm: RSA
          bits: 3072
          usage: Sign,Verify,Wrap,Unwrap
          startValidity: "2021-01-21 19:54:44"
          endValidity: "2026-01-21 19:54:44"
          exportable: true
          clearExportable: false
          passwordExportable: false
          requiresAuth: false
          modifiable: true
      -
          slot: 3
          type: "key"
          name: ""
          kcv: "6840"
          algorithm: RSA
          bits: 3072
          usage: Encrypt,Decrypt,Sign,Verify,Wrap,Unwrap
          startValidity: "1971-01-01 00:00:00"
          endValidity: "2999-01-01 00:00:00"
          exportable: false
          clearExportable: false
          passwordExportable: false
          requiresAuth: true
          modifiable: true       
      -
          slot: 4
          type: "key"
          name: ""
          kcv: "7BDA"
          algorithm: RSA
          bits: 3072
          usage: Encrypt,Verify,Wrap
          startValidity: "1971-01-01 00:00:00"
          endValidity: "2999-01-01 00:00:00"
          exportable: true
          clearExportable: false
          passwordExportable: false
          requiresAuth: true
          modifiable: true        
      -
          slot: 5
          type: "certificate"
          name: "/C=US/O=ISC/CN=CertAgent 7.0.8 Root CA 0DB4/CN=CertAgent 7.0.8 Root CA 0DB4"
          fingerprint: "D7AE7F335BCD02CC3D1433BF60F66113FBB4339E"
          algorithm: RSA
          bits: 3072
          usage: Sign,Verify
          startValidity: "2021-01-21 19:54:46"
          endValidity: "2026-01-21 19:54:46"
          exportable: true
          clearExportable: false
          passwordExportable: false
          requiresAuth: false
          modifiable: true
      -
          slot: 6
          type: "key"
          name: ""
          kcv: "F1FB"
          algorithm: RSA
          bits: 3072
          usage: Encrypt,Decrypt,Sign,Verify,Wrap,Unwrap
          startValidity: "1971-01-01 00:00:00"
          endValidity: "2999-01-01 00:00:00"
          exportable: false
          clearExportable: false
          passwordExportable: false
          requiresAuth: true
          modifiable: true
      -
          slot: 7
          type: "key"
          name: ""
          kcv: "2CBF"
          algorithm: RSA
          bits: 3072
          usage: Encrypt,Verify,Wrap
          startValidity: "1971-01-01 00:00:00"
          endValidity: "2999-01-01 00:00:00"
          exportable: true
          clearExportable: false
          passwordExportable: false
          requiresAuth: true
          modifiable: true
      -
          slot: 8
          type: "certificate"
          name: "/C=US/O=ISC/CN=CertAgent 7.0.8 Root CA 0DB4/CN=centos6.linuxvmimages.local"
          fingerprint: "29E36582281B7029E468E8FA6E4139077996851B"
          algorithm: RSA
          bits: 3072
          usage: Sign,Verify,Wrap,Unwrap
          startValidity: "2021-01-21 19:54:47"
          endValidity: "2026-01-21 19:54:46"
          exportable: true
          clearExportable: false
          passwordExportable: false
          requiresAuth: false
          modifiable: true
If all nine keys are present, the installation succeeded.