Certificate Authority
...
ISC CertAgent integrations
ISC - Linux
Verify that the CertAgent keys and certificates exist on the Vectera Plus
1min
Choose one of the following methods to log in to the HSM and verify that the CertAgent keys and certificates are generated and stored on the HSM:
Excrypt Manager
FXCLI
1
In Excrypt Manager, connect to the HSM and log in with the default Admin identities.
2
Go to the Key Management window to access information on the RSA keys and the certificates created by CertAgent on the HSM.
1
After you use FXCLI to connect and log to the HSM, run the keytable list command:
This example remoted the externalData and pkcs11Attributes fields and associated values to shorten the command output.
FXCLI
1keytable list
2result:
3 status: success
4 statusCode: 0
5slots:
6 -
7 slot: 0
8 type: "key"
9 name: ""
10 kcv: "BFE0"
11 algorithm: RSA
12 bits: 3072
13 usage: Encrypt,Decrypt,Sign,Verify,Wrap,Unwrap
14 startValidity: "1971-01-01 00:00:00"
15 endValidity: "2999-01-01 00:00:00"
16 exportable: false
17 clearExportable: false
18 passwordExportable: false
19 requiresAuth: true
20 modifiable: true
21 -
22 slot: 1
23 type: "key"
24 name: ""
25 kcv: "7C0E"
26 algorithm: RSA
27 bits: 3072
28 usage: Encrypt,Verify,Wrap
29 startValidity: "1971-01-01 00:00:00"
30 endValidity: "2999-01-01 00:00:00"
31 exportable: true
32 clearExportable: false
33 passwordExportable: false
34 requiresAuth: true
35 modifiable: true
36 -
37 slot: 2
38 type: "certificate"
39 name: "/C=US/O=ISC/CN=CertAgent 7.0.8 Root CA 0DB4/CN=CertAgent 7.0.8 System Key 0DB4"
40 fingerprint: "27262907210242616B91281FC6405DD82EE91B35"
41 algorithm: RSA
42 bits: 3072
43 usage: Sign,Verify,Wrap,Unwrap
44 startValidity: "2021-01-21 19:54:44"
45 endValidity: "2026-01-21 19:54:44"
46 exportable: true
47 clearExportable: false
48 passwordExportable: false
49 requiresAuth: false
50 modifiable: true
51 -
52 slot: 3
53 type: "key"
54 name: ""
55 kcv: "6840"
56 algorithm: RSA
57 bits: 3072
58 usage: Encrypt,Decrypt,Sign,Verify,Wrap,Unwrap
59 startValidity: "1971-01-01 00:00:00"
60 endValidity: "2999-01-01 00:00:00"
61 exportable: false
62 clearExportable: false
63 passwordExportable: false
64 requiresAuth: true
65 modifiable: true
66 -
67 slot: 4
68 type: "key"
69 name: ""
70 kcv: "7BDA"
71 algorithm: RSA
72 bits: 3072
73 usage: Encrypt,Verify,Wrap
74 startValidity: "1971-01-01 00:00:00"
75 endValidity: "2999-01-01 00:00:00"
76 exportable: true
77 clearExportable: false
78 passwordExportable: false
79 requiresAuth: true
80 modifiable: true
81 -
82 slot: 5
83 type: "certificate"
84 name: "/C=US/O=ISC/CN=CertAgent 7.0.8 Root CA 0DB4/CN=CertAgent 7.0.8 Root CA 0DB4"
85 fingerprint: "D7AE7F335BCD02CC3D1433BF60F66113FBB4339E"
86 algorithm: RSA
87 bits: 3072
88 usage: Sign,Verify
89 startValidity: "2021-01-21 19:54:46"
90 endValidity: "2026-01-21 19:54:46"
91 exportable: true
92 clearExportable: false
93 passwordExportable: false
94 requiresAuth: false
95 modifiable: true
96 -
97 slot: 6
98 type: "key"
99 name: ""
100 kcv: "F1FB"
101 algorithm: RSA
102 bits: 3072
103 usage: Encrypt,Decrypt,Sign,Verify,Wrap,Unwrap
104 startValidity: "1971-01-01 00:00:00"
105 endValidity: "2999-01-01 00:00:00"
106 exportable: false
107 clearExportable: false
108 passwordExportable: false
109 requiresAuth: true
110 modifiable: true
111 -
112 slot: 7
113 type: "key"
114 name: ""
115 kcv: "2CBF"
116 algorithm: RSA
117 bits: 3072
118 usage: Encrypt,Verify,Wrap
119 startValidity: "1971-01-01 00:00:00"
120 endValidity: "2999-01-01 00:00:00"
121 exportable: true
122 clearExportable: false
123 passwordExportable: false
124 requiresAuth: true
125 modifiable: true
126 -
127 slot: 8
128 type: "certificate"
129 name: "/C=US/O=ISC/CN=CertAgent 7.0.8 Root CA 0DB4/CN=centos6.linuxvmimages.local"
130 fingerprint: "29E36582281B7029E468E8FA6E4139077996851B"
131 algorithm: RSA
132 bits: 3072
133 usage: Sign,Verify,Wrap,Unwrap
134 startValidity: "2021-01-21 19:54:47"
135 endValidity: "2026-01-21 19:54:46"
136 exportable: true
137 clearExportable: false
138 passwordExportable: false
139 requiresAuth: false
140 modifiable: true
If all nine keys are present, the installation succeeded.
Updated 05 Aug 2024
Did this page help you?