Command Summary

purecert create eskm-kmip-cert --self-signed --common-name eskm-kmip-client

To create a self-signed client certificate for KMIP authentication

purecert list eskm-kmip-client --certificate

To list the details of the generated certificate

purecert construct eskm-kmip-cert --certificate-signing-request

To generate a CSR

purecert setattr eskm-kmip-cert --certificate

To associate the signed certificate with the client identity

purekmip create ESKM-KMIP-Server --uri kms1.testeskm.com:5696 --certificate eskm-kmip-cert --ca-certificate

To configure the ESKM KMIP server with URI, client cert and CA cert

purekmip test ESKM-KMIP-Server

To test connectivity and authentication with the KMIP server

purekmip list ESKM-KMIP-Server

To display available KMIP server details

purearray enable security-token --kmip ESKM-KMIP-Server

To enable security token and establish trust with the KMIP server