All Products
Search
Document Center

Key Management Service:getCertReq

Last Updated:Mar 31, 2026

Generates a certificate signing request (CSR) for an HSM (Hardware Security Module) and saves it to a file. A Certificate Authority (CA) uses this CSR to issue a certificate for the HSM.

Important

Run this command in server mode on the target HSM. For more information, see server.

Prerequisites

This command can be run by the following user types. For role descriptions, see HSM user permission table.

  • Administrator (CO)

  • Cryptographic user (CU)

  • Audit user (AU)

Syntax

server0> getCertReq <file-name>
Important

Enter parameters in the order specified by the syntax.

Parameters

ParameterDescriptionRequiredValid Values
<file-name>The path and file name for saving the CSR.YesNo Special Requirements

Example

  1. Enter server mode using the server command.

    cloudmgmt>server 0
    Server is in 'E2E' mode...
    
    server0>
  2. Generate the CSR and save it to /tmp/p.csr.

    server0>getCertReq /tmp/p.csr
    getCertReq success