Keys
Access to key store
Get all keys
Returns a list containing the names of all keys currently stored on the HSM
Create a key
Create a asymmetric or symmetric key.
Rotate a key
Rotates a symmetric key
Generate key attestation files
Returns the attestation files of a key as a ZIP archive.
Import a key
The private key must be a valid PKCS#8 key: openssl genpkey -algorithm EC -pkeyopt ec_paramgen_curve:secp256k1 -outform PEM -out secp256k1_private_key.pem
Export a key
Get the public and private key or secret key exported from the HSM (extractable & sensitive must be 'true')
Delete a key
Deletes the key identified by the keyName.
Change key password
Changes the password of a key.
Get key attributes
Returns the attributes of a key
Get crypto address
Returns the crypto currency address base (without checksum or network prefix) of a key in base64 format
Import a key from a seed
Generate a key from a given seed.
Derive a key
Derive a key based on a BIP32 / SLIP10 master key (Attention: The derived key will be stored on the HSM memory).Use KeyOperations with derivation path to temporarily derive an ephemeral key from base key
Create data object
Save a data object on the HSM
Modify key
Modifies exactly one key attribute per request. The only exception is that startDate and endDate may be supplied together as one validity-period change. A request containing multiple other changes is rejected with application errorCode 600.
Get public key
Returns the public key
Get modified keys
Returns a list containing the names of all HSM keys modified within the provided time window. The time window is expressed in milliseconds and counted backwards from the current TSB host time.
Get data object
Retrieve a data object saved on the HSM
Delete data object
Deletes the data object identified by the dataObjectName from the HSM
Get attestation certificate
Returns certificate of attestation key as an base64 encoded string
Delete a key
Deletes the key identified by 'keyName' from the HSM.