View the keys and certificates that Venafi TPP created on the HSM

1min
To view the keys and certificates that Venafi TPP created on the HSM, use the PKCS11Manager utility packaged with the  PKCS #11 module.
1
In File Explorer, go to the directory where the FXPKCS11 module is installed and double-click the PKCS11Manager.exe file to run it.
This opens the following main menu:
Shell
Main Menu
    1. Print Library/Token Info

    2. Generate Key

    3. Find Objects
    4. Modify Objects
    5. Delete Objects

    6. Generate Random Data

    7. Sign Data

    8. Login
    9. Logout

    0. Exit
Main Menu
    1. Print Library/Token Info

    2. Generate Key

    3. Find Objects
    4. Modify Objects
    5. Delete Objects

    6. Generate Random Data

    7. Sign Data

    8. Login
    9. Logout

    0. Exit
﻿
2
Enter 8 to log in and select the Enter key.
3
Enter 1 and select the Enter key.
4
Enter the password of the identity defined in the FXPKCS11 configuration file.
If is succeeds, you see a confirmation message that you are logged in.
5
Enter 3 to find objects and select the Enter key.
6
Enter 1 to find all objects and select the Enter key.
PKCS11Manager prints details for all keys and certificates the connecting identity has permission to view, similar to the following example:
Shell
Total number of found objects: 5
  Object ID: 1
    Internal ID: 1
    Excrypt Board Slot: 0
    Class: CKO_SECRET_KEY
    Key Type: AES
    Token: Yes
    Private: No
    Sensitive: Yes
    Modifiable: Yes
    Value Len: 32
    Value Bits: 256
    Label: TestKey855
    KCV: E645
    Usage: ED
  Object ID: 2
    Internal ID: 2
    Excrypt Board Slot: 1
    Class: CKO_PRIVATE_KEY
    Token: Yes
    Private: No
    Sensitive: Yes
    Modifiable: Yes
    Modulus Bits: 2048
    Label: RSA 2048 1bb264b04b5f495f8a7c1ed43b6551cd
    ID: 10976
    KCV: CC7D
    Usage: SV
  Object ID: 3
    Internal ID: 3
    Excrypt Board Slot: 2
    Class: CKO_PUBLIC_KEY
    Token: Yes
    Private: No
    Sensitive: No
    Modifiable: Yes
    Modulus Bits: 2048
    Label: RSA 2048 1bb264b04b5f495f8a7c1ed43b6551cd
    ID: 10976
    KCV: 8F48
    Usage: V
  Object ID: 4
    Internal ID: 4
    Excrypt Board Slot: 3
    Class: CKO_PRIVATE_KEY
    Token: Yes
    Private: No
    Sensitive: Yes
    Modifiable: Yes
    Label: EC_P384 66573c87189c47d7ad2d82e4f072e603
    ID: 10979
    KCV: 7ECC
    Usage: SV
  Object ID: 5
    Internal ID: 5
    Excrypt Board Slot: 4
    Class: CKO_PUBLIC_KEY
    Token: Yes
    Private: No
    Sensitive: No
    Modifiable: Yes
    Label: EC_P384 66573c87189c47d7ad2d82e4f072e603
    ID: 10979
    KCV: 7DA5
    Usage: V
Total number of found objects: 5
  Object ID: 1
    Internal ID: 1
    Excrypt Board Slot: 0
    Class: CKO_SECRET_KEY
    Key Type: AES
    Token: Yes
    Private: No
    Sensitive: Yes
    Modifiable: Yes
    Value Len: 32
    Value Bits: 256
    Label: TestKey855
    KCV: E645
    Usage: ED
  Object ID: 2
    Internal ID: 2
    Excrypt Board Slot: 1
    Class: CKO_PRIVATE_KEY
    Token: Yes
    Private: No
    Sensitive: Yes
    Modifiable: Yes
    Modulus Bits: 2048
    Label: RSA 2048 1bb264b04b5f495f8a7c1ed43b6551cd
    ID: 10976
    KCV: CC7D
    Usage: SV
  Object ID: 3
    Internal ID: 3
    Excrypt Board Slot: 2
    Class: CKO_PUBLIC_KEY
    Token: Yes
    Private: No
    Sensitive: No
    Modifiable: Yes
    Modulus Bits: 2048
    Label: RSA 2048 1bb264b04b5f495f8a7c1ed43b6551cd
    ID: 10976
    KCV: 8F48
    Usage: V
  Object ID: 4
    Internal ID: 4
    Excrypt Board Slot: 3
    Class: CKO_PRIVATE_KEY
    Token: Yes
    Private: No
    Sensitive: Yes
    Modifiable: Yes
    Label: EC_P384 66573c87189c47d7ad2d82e4f072e603
    ID: 10979
    KCV: 7ECC
    Usage: SV
  Object ID: 5
    Internal ID: 5
    Excrypt Board Slot: 4
    Class: CKO_PUBLIC_KEY
    Token: Yes
    Private: No
    Sensitive: No
    Modifiable: Yes
    Label: EC_P384 66573c87189c47d7ad2d82e4f072e603
    ID: 10979
    KCV: 7DA5
    Usage: V
﻿
﻿
Configure Venafi TPP to use the Vectera Plus
Certificate validation