Tech corner
Utility to simplify the import of certificates and private keys into a PKCS#11 cryptographic token (HSM)
Feb 21 2023, Updated Dec 18 2024
The 3-Heights™ Security API supports the creation and verification of digital signatures using a cryptographic token via a PKCS#11 interface. However, the component can only be used if the token has appropriate certificates and private keys stored on it. A useful command line utility helps to store the required objects into the token. The command line utility cticert.exe can import X.509 certificates and private keys stored in PKCS#12 formated files. The utility uses the PKCS#11 interface and is thus vendor independent. In addition to the import function the utility can list the certificates for each slot and export certificates as well. The utility is portable and available on all common platforms.