Is there a way to list all keys inside the Utimaco HSM, created by PKCS11 interface and cngtool? currently, I only can view each of them separately:

PKCS11: using "PKCS#11 CryptoServer Administration" interface.

CNG keys using the command: cngtool ListKeys


This is not a general PKCS#11 question, but it relates to a specific vendor and how this vendor implemented different APIs. Therefore, primary contact point would be their support.

In this case, PKCS#11 and CNG use the vendor's proprietary API CXI and, therefore, all keys can be listed using cxitool (given that you have a user with the proper rights).

  • I forgot to mention the vendor, edited the question – mshwf Sep 4 '20 at 7:42
  • I know :) The product name was unambiguous. However, I've edited my answer. – dannyM Sep 4 '20 at 7:47
  • I tried the cxitool yesterday, it somehow works, it lists all user's keys regardless of the key origin. – mshwf Sep 4 '20 at 8:24
  • But sounds like there are restrictions to list ALL keys inside the HSM – mshwf Sep 4 '20 at 8:26
  • Access to keys is restricted by the user attribute CXI_GROUP that must match the group of the key. Read e.g. the cxitool manual section "Cryptographic Keys and Key Groups". – dannyM Sep 4 '20 at 8:40

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.