For OpenJDK 8 with EC Key

1. Generate an EC key pair on the Utimaco HSM.

Provide information when prompted.

Here:

• EC is the key algorithm

• NONE is the keystore for HSM

• CryptoServer is the store type

• 12345678 is the slot PIN

• CryptoServer is the provider name

• tomcatselfsignedECKey is the key name that will be generated on the Utimaco HSM

keytool command to generate keys

2. List the keys using the cxitool.

List keys output using cxitool

3. Verify that the keytool command shows the created certificate.

Here:

• NONE is the key store for HSM

• CryptoServer is the store type

• 12345678 is the PIN

• CryptoServer is the provider name

keytool list output