Retrieves a certificate from a Hardware Security Module (HSM). Use this command to diagnose certificate errors or troubleshoot configuration faults.
Prerequisites
Before you begin, make sure that:
The target HSM is in server mode. To enter server mode, run the server command.
Who can run this command
Any of the following user types can run getCert. See the HSM user permission table for details.
Administrator (CO)
Cryptographic User (CU)
Audit User (AU)
Syntax
server0> getCert <file-name> <certificate-type>Enter parameters in the order shown. Positional order is required.
Example: Retrieve the HSM root certificate
This example retrieves the HSM root certificate and saves it to /tmp/PO.crt.
Enter server mode.
cloudmgmt>server 0 Server is in 'E2E' mode... server0>Run
getCertwith the target file path and certificate type4(HSM root certificate).server0>getCert /tmp/PO.crt 4 getCert successThe
getCert successmessage confirms the command completed. The certificate is saved to the path you specified.
Parameters
| Parameter | Description | Required | Valid values |
|---|---|---|---|
<file-name> | Path and file name for saving the certificate | Yes | No restrictions |
<certificate-type> | Type of certificate to retrieve | Yes | 1, 2, 4, 8, 16 |
Certificate types:
| Value | Certificate |
|---|---|
1 | Manufacturer root certificate |
2 | Manufacturer hardware certificate |
4 | HSM root certificate |
8 | HSM certificate (signed by customer root certificate) |
16 | HSM certificate (signed by manufacturer root certificate) |