Online Provisioning

[NEXUSNERD]

I have successfully completed the online Provisioning on my board , now what I have to do is I have extract the cert or key or possible read the blob which is created  after the edge2lock provisioning so is it possible to do that ? 

Using Frdm i.mx93

[AldoG]

Hello,

You may use pkcs11-tool for this, please have a look to the documentation here:
https://github.com/nxp-imx/imx-smw/blob/release/version_5.x/Documentations/user_guide/pkcs11/pkcs11_...

Also, I would suggest to have a look to the SMW user manual:
https://github.com/nxp-imx/imx-smw/blob/release/version_5.x/Documentations/user_manual/SMW_UserManua...

Best regards/Saludos,
Aldo.

[NEXUSNERD]

Hi Aldo,

Thank you for your reply.

I have already tried using pkcs11-tool with the SMW PKCS#11 provider after successful online provisioning on the FRDM i.MX93, but I cannot see or read the provisioned certificate or key.

Could you please clarify:

Are the provisioned certificate and private key expected to be accessible through the PKCS#11 interface?
If not, are they stored securely in ELE and intended to be used only through PSA Crypto/SMW APIs without being exported?
My goal is to use the provisioned credentials for mutual TLS.
Thank you.