CST - hab4_pki_tree.sh generate keys directly to HSM ?

Showing results for 
Search instead for 
Did you mean: 

CST - hab4_pki_tree.sh generate keys directly to HSM ?

Contributor II


I would like you to ask, if there is any tutorial, how to use hab4_pki_tree.sh, which generate pki tree directly to the HSM ? In Code - Signing Tool - HSM, there is a part that, you write the private keys to the HSM. For my HSM, I can not write private key to HSM, I need to generate it on HSM. Now I used pkcs11-tool to generate key (pkcs11-tool --module /usr/lib/x86_64-linux-gnu/opensc-pkcs11.so -l --pin 123456 --keypairgen --key-type rsa:4096 --id 10
). Or do I need to modify the hab4_pki_tree.sh to use pkcs11-tool ?


Tomas Klein

Labels (1)
Tags (3)
0 Kudos
1 Reply

NXP TechSupport
NXP TechSupport



    The recent CST 3.2 contains sources, therefore customers can try to

implement own solutions, more suitable for their purposes. 

Have a great day,





- If this post answers your question, please click the "Mark Correct" button. Thank you!

 - We are following threads for 7 weeks after the last post, later replies are ignored

Please open a new thread and refer to the closed one, if you have a related question at a later point in time.

0 Kudos