Backing up and Restoring a Key Database with P11CAT

It is possible to backup separate PKCS#11 slots by using either the P11CAT or the p11tool2. In this guide we use the P11CAT for the backup procedure. Please refer to [CSP11TOOL2] for the backup procedure with the p11tool2.


  1. Open the PKCS#11 CryptoServer Administration (P11CAT).

  2. Login to the slot you wish to backup as the Cryptographic User (achieve the permission level of at least 00000002).

  3. Click on Backup/Restore.

  4. Click on Backup/Restore Keys.

  5. Select one among the 4 options. Click the one that corresponds to your case. The possibilities are to perform either:

    1. Backup Internal Keys,

    2. Backup External Keys,

    3. Restore Key Backup to Internal Key Store,

    4. Restore Key Backup to External Key Store.

  6. A popup window opens.

    1. Select the directory where the key database will be backed up and type the name of the key database in the section File name.

    2. If you chose to restore a key backup to an internal or an external key store, select the directory, where your backup is located.

    3. To confirm your choice, click on Save.

  7. In the Status window a log of the performed action is displayed.