> For the complete documentation index, see [llms.txt](https://emca.emudhra.com/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://emca.emudhra.com/previous-release-versions/v4.2.7/user-manual/officer/manage-keystores.md).

# Manage Keystores

The manage keystore feature in emCA allows you to check the status of connected HSMs when creating key profiles, view HSM device information, and see where the HSM is used while creating key profiles. This information can be helpful for troubleshooting HSM-related issues and for ensuring that you are using the correct HSM for your needs.

An officer can inspect the application's connections to various HSMs, as well as the details of the key pairs available in each HSM.

<figure><img src="/files/N5KW7KoSR2AQcGVDqRiL" alt=""><figcaption></figcaption></figure>

Click on <img src="/files/aBEnCh6SLspTXXJ32kyJ" alt="" data-size="line"> to display the details for the corresponding HSM. The following view will open:

<figure><img src="/files/ctVtyVnmNoc7RyyFHg4f" alt=""><figcaption></figcaption></figure>

In order to facilitate the identification of the HSM, the top section displays basic information.

In the lower section, all keys located in the HSM Slot described by the corresponding PKCS11 configuration are listed.

If there are more keys that cannot fit on one page, use the navigation at the bottom of the table to switch pages.

{% hint style="info" %}
**Information:**&#x20;

Unused keys can be identified by their Alias Name and CN being equal.
{% endhint %}

#### Download

Click on <img src="/files/MMKqUVJ94qlDh7L3a2MD" alt="" data-size="line">to download the certificate assigned to the key as

* DER-encoded X.509 certificate (.cer)
* Base64-encoded X.509 certificate (.cer)
* Cryptographic Message Syntax Standard PKCS#7 certificate (.p7b)

Select the desired export format and click "Download" to save the user certificate to your OS's default download location.

{% hint style="info" %}
**Information:**

Unused keys have expired certificates available for download.

The validity of these certificates is 0 seconds
{% endhint %}


---

# Agent Instructions
This documentation is published with GitBook. GitBook is the documentation platform designed so that both humans and AI agents can read, navigate, and reason over technical content effectively. Learn more at gitbook.com.

## Querying This Documentation
If you need additional information that is not directly available in this page, you can query the documentation dynamically by asking a question.

Perform an HTTP GET request on the current page URL with the `ask` query parameter, and the optional `goal` query parameter:

```
GET https://emca.emudhra.com/previous-release-versions/v4.2.7/user-manual/officer/manage-keystores.md?ask=<question>&goal=<endgoal>
```

`ask` is the immediate question: it should be specific, self-contained, and written in natural language.
`goal` is optional and describes the broader end goal you are ultimately trying to accomplish on behalf of the user. GitBook uses it to tailor the answer towards what is most useful for that goal.

The response will contain a direct answer to the question and relevant excerpts and sources from the documentation.

Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.