Is there a way to list all keys inside the Utimaco HSM, created by PKCS11 interface and cngtool? currently, I only can view each of them separately:

PKCS11: using "PKCS#11 CryptoServer Administration" interface.

CNG keys using the command: cngtool ListKeys

1 Answer 1


This is not a general PKCS#11 question, but it relates to a specific vendor and how this vendor implemented different APIs. Therefore, primary contact point would be their support.

In this case, PKCS#11 and CNG use the vendor's proprietary API CXI and, therefore, all keys can be listed using cxitool (given that you have a user with the proper rights).

  • I forgot to mention the vendor, edited the question
    – mshwf
    Sep 4, 2020 at 7:42
  • I know :) The product name was unambiguous. However, I've edited my answer.
    – dannyM
    Sep 4, 2020 at 7:47
  • I tried the cxitool yesterday, it somehow works, it lists all user's keys regardless of the key origin.
    – mshwf
    Sep 4, 2020 at 8:24
  • But sounds like there are restrictions to list ALL keys inside the HSM
    – mshwf
    Sep 4, 2020 at 8:26
  • Access to keys is restricted by the user attribute CXI_GROUP that must match the group of the key. Read e.g. the cxitool manual section "Cryptographic Keys and Key Groups".
    – dannyM
    Sep 4, 2020 at 8:40

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .