Manage Keystores

An administrator can inspect the application's connections with various HSMs and view details of keypairs available in each HSM.

Click on to show the details for the corresponding HSM. The following view will open:

In the top section, basic information about the HSM is displayed in order to help identify it.

All keys in the HSM Slot described by the corresponding PKCS11 configuration are listed in the lower section.

If more keys are found than can be displayed on one page, you can switch pages using the navigation element at the bottom of the table:

Information: Unused keys can be identified by their Alias Name and CN being equal.

Click on to download the certificate assigned to key as:

• DER-encoded X.509 certificate (.cer)

• Base64-encoded X.509 certificate (.cer)

• Cryptographic Message Syntax Standard PKCS#7 certificate (.p7b)

Select the export format of your choice and click Download to start the download of the user certificate. The user certificate will be downloaded to the standard download location of your OS.

Information: Unused keys have expired certificates available for download. The validity of these certificates is 0 seconds.