Pkcs11-tool

Install pkcs11-tool

apt install opensc

Get hsm info

pkcs11-tool --module /opt/nfast/toolkits/pkcs11/libcknfast.so --show-info

List available slots

pkcs11-tool --module /opt/nfast/toolkits/pkcs11/libcknfast.so --list-slots

List objects on specified slot

pkcs11-tool --module /opt/nfast/toolkits/pkcs11/libcknfast.so --list-objects --slot 0x1f655491

List certificates on specified slot

pkcs11-tool --module /opt/nfast/toolkits/pkcs11/libcknfast.so --list-objects --slot 0x1f655491 --type cert

Export public key

pkcs11-tool --module /usr/lib/libcs_pkcs11_R2.so --login --slot 3 --read-object --type pubkey --id <id> --output-file slot3_pub.key

Export certificate(needs partitiob/slot password)

pkcs11-tool --module /opt/nfast/toolkits/pkcs11/libcknfast.so --login --slot 0x1f55492 --read-object --type cert --id <id> --output-file cert.der

Thales-Other

pkcs11-tool --module /usr/lib/libCryptoki2_64.so --list-slots
pkcs11-tool --module /usr/lib/libCryptoki2_64.so --list-objects --login --login-type user --token-label <label>
pkcs11-tool --module /usr/lib/libCryptoki2_64.so --list-objects -r --type cert -l --login-type user --token-label <label>