# Manage Keystores

An administrator can inspect the application's connections with various HSMs and view details of keypairs available in each HSM.

<figure><img src="https://2804668976-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FOwstGDJbR4yGRTr2aEFp%2Fuploads%2FoQhdcobJs5YeNA3uWC7i%2Fimage.png?alt=media&#x26;token=731e76f7-9c91-4099-97d3-975457ea01d0" alt=""><figcaption></figcaption></figure>

Click on <img src="https://2804668976-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FOwstGDJbR4yGRTr2aEFp%2Fuploads%2FKNNMpFUWgcFVFnZyIFHb%2Fimage.png?alt=media&#x26;token=a1b217c6-146a-4b83-961b-d7448be76348" alt="" data-size="line"> to show the details for the corresponding HSM. The following view will open:

<figure><img src="https://2804668976-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FOwstGDJbR4yGRTr2aEFp%2Fuploads%2FlFeOvtj7m79jrQLLg84l%2Fimage.png?alt=media&#x26;token=6c010492-1c9d-4720-a5ed-6888ab65dfbc" alt=""><figcaption></figcaption></figure>

In the top section, basic information about the HSM is displayed in order to help identify it.

All keys in the HSM Slot described by the corresponding PKCS11 configuration are listed in the lower section.

If more keys are found than can be displayed on one page, you can switch pages using the navigation element at the bottom of the table:

<figure><img src="https://2804668976-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FOwstGDJbR4yGRTr2aEFp%2Fuploads%2FNCHv6DKNTQRYAQylB0PM%2Fimage.png?alt=media&#x26;token=6d207ca7-c8c7-40d1-b92d-0f32367bebc6" alt="" width="155"><figcaption></figcaption></figure>

{% hint style="info" %}
**Information:** Unused keys can be identified by their Alias Name and CN being equal.
{% endhint %}

Click on <img src="https://2804668976-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FOwstGDJbR4yGRTr2aEFp%2Fuploads%2FandMpLEHeHh8KI4DHtlF%2Fimage.png?alt=media&#x26;token=4831d609-54a5-46f3-96d7-f71360d8b80a" alt="" data-size="line">to download the certificate assigned to key as:

* DER-encoded X.509 certificate (.cer)
* Base64-encoded X.509 certificate (.cer)
* Cryptographic Message Syntax Standard PKCS#7 certificate (.p7b)

<figure><img src="https://2804668976-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FOwstGDJbR4yGRTr2aEFp%2Fuploads%2FzHrZ5YjPPqwSUIDMAsA5%2Fimage.png?alt=media&#x26;token=996e0573-2093-419d-8fcb-e4dcf67aada9" alt="" width="257"><figcaption></figcaption></figure>

Select the export format of your choice and click Download to start the download of the user certificate. The user certificate will be downloaded to the standard download location of your OS.

{% hint style="info" %}
**Information:** Unused keys have expired certificates available for download. The validity of these certificates is 0 seconds.
{% endhint %}


---

# Agent Instructions: Querying This Documentation

If you need additional information that is not directly available in this page, you can query the documentation dynamically by asking a question.

Perform an HTTP GET request on the current page URL with the `ask` query parameter:

```
GET https://emca.emudhra.com/previous-release-versions/v4.2.2/user-manual/administrator/manage-keystores.md?ask=<question>
```

The question should be specific, self-contained, and written in natural language.
The response will contain a direct answer to the question and relevant excerpts and sources from the documentation.

Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.