Integration Guide › Integrate an Eracom HSM › Create Certificates › Export the CA Certificate to a PEM File

Export the CA Certificate to a PEM File

Before you can configure the DXserver to work with the HSM, you must export the root CA and DSA certificates to PEM files.

Note: Only the certificates will be exported, not the private keys. The private keys will remain in the HSM.

To export the CA certificate

1. Change to the ssld directory
2. Export the certificate, using the following command:

   ctcert x -frootCA.pem -s2 -lrootCA
   

   where:

   -lcertificate-lable

   Specifies the label of the certificate stored in the HSM slot

   -ffilename

   Specifies the file name of the exported certificate