This topic explains the process of obtaining a certificate from HSM using the getCert command.
Feature description
The getCert command allows for the retrieval of certificates from HSM, aiding in troubleshooting certificate abnormalities or configuration faults.
Ensure you are in server mode on the target HSM before executing this command. For more information, see server.
User type
The command can be executed by the following user types. Refer to the HSM user permission table for user descriptions.
Administrator (CO)
Cryptographic User (CU)
Audit User (AU)
Syntax
Enter the command as per the following syntax. For a description of the parameters, see Parameters.
server0> getCert <file-name> <certificate-type>Parameters must be entered in the order specified by the syntax.
Example
The example below demonstrates how to obtain the HSM root certificate.
Enter server mode using the server command.
cloudmgmt>server 0 Server is in 'E2E' mode... server0>Retrieve the HSM root certificate and save it as /tmp/PO.crt.
server0>getCert /tmp/PO.crt 4 getCert success
Parameters
Parameter Name |
Description |
Required |
Valid Values |
<file name> |
Specifies the file name for saving the certificate. |
Yes |
No special requirements |
<certificate type> |
Defines the type of certificate to retrieve. |
Yes |
|