Certificate Authority
...
ISC CertAgent integrations
ISC - Linux
Verify that the CertAgent keys and certificates exist on the Vectera Plus
1min
choose one of the following methods to log in to the hsm and verify that the certagent keys and certificates are generated and stored on the hsm excrypt manager in excrypt manager, connect to the hsm and log in with the default admin identities go to the key management window to access information on the rsa keys and the certificates created by certagent on the hsm fxcli after you use fxcli to connect and log to the hsm, run the keytable list command this example remoted the externaldata and pkcs11attributes fields and associated values to shorten the command output fxcli keytable list result status success statuscode 0 slots \ slot 0 type "key" name "" kcv "bfe0" algorithm rsa bits 3072 usage encrypt,decrypt,sign,verify,wrap,unwrap startvalidity "1971 01 01 00 00 00" endvalidity "2999 01 01 00 00 00" exportable false clearexportable false passwordexportable false requiresauth true modifiable true \ slot 1 type "key" name "" kcv "7c0e" algorithm rsa bits 3072 usage encrypt,verify,wrap startvalidity "1971 01 01 00 00 00" endvalidity "2999 01 01 00 00 00" exportable true clearexportable false passwordexportable false requiresauth true modifiable true \ slot 2 type "certificate" name "/c=us/o=isc/cn=certagent 7 0 8 root ca 0db4/cn=certagent 7 0 8 system key 0db4" fingerprint "27262907210242616b91281fc6405dd82ee91b35" algorithm rsa bits 3072 usage sign,verify,wrap,unwrap startvalidity "2021 01 21 19 54 44" endvalidity "2026 01 21 19 54 44" exportable true clearexportable false passwordexportable false requiresauth false modifiable true \ slot 3 type "key" name "" kcv "6840" algorithm rsa bits 3072 usage encrypt,decrypt,sign,verify,wrap,unwrap startvalidity "1971 01 01 00 00 00" endvalidity "2999 01 01 00 00 00" exportable false clearexportable false passwordexportable false requiresauth true modifiable true \ slot 4 type "key" name "" kcv "7bda" algorithm rsa bits 3072 usage encrypt,verify,wrap startvalidity "1971 01 01 00 00 00" endvalidity "2999 01 01 00 00 00" exportable true clearexportable false passwordexportable false requiresauth true modifiable true \ slot 5 type "certificate" name "/c=us/o=isc/cn=certagent 7 0 8 root ca 0db4/cn=certagent 7 0 8 root ca 0db4" fingerprint "d7ae7f335bcd02cc3d1433bf60f66113fbb4339e" algorithm rsa bits 3072 usage sign,verify startvalidity "2021 01 21 19 54 46" endvalidity "2026 01 21 19 54 46" exportable true clearexportable false passwordexportable false requiresauth false modifiable true \ slot 6 type "key" name "" kcv "f1fb" algorithm rsa bits 3072 usage encrypt,decrypt,sign,verify,wrap,unwrap startvalidity "1971 01 01 00 00 00" endvalidity "2999 01 01 00 00 00" exportable false clearexportable false passwordexportable false requiresauth true modifiable true \ slot 7 type "key" name "" kcv "2cbf" algorithm rsa bits 3072 usage encrypt,verify,wrap startvalidity "1971 01 01 00 00 00" endvalidity "2999 01 01 00 00 00" exportable true clearexportable false passwordexportable false requiresauth true modifiable true \ slot 8 type "certificate" name "/c=us/o=isc/cn=certagent 7 0 8 root ca 0db4/cn=centos6 linuxvmimages local" fingerprint "29e36582281b7029e468e8fa6e4139077996851b" algorithm rsa bits 3072 usage sign,verify,wrap,unwrap startvalidity "2021 01 21 19 54 47" endvalidity "2026 01 21 19 54 46" exportable true clearexportable false passwordexportable false requiresauth false modifiable true if all nine keys are present, the installation succeeded