cmu getattribute

This function outputs any viewable attributes for an object. An optional output filename can be used to direct the output to a file.

Syntax

cmu getAttribute -handle=<handle#> [-attributes=<attribute(s)>] [-outputFile=<filename>] [-password=<password>] [-slot=<slot#>]

Argument(s)

Description

-attributes=<attribute(s)>

Lists the attributes to be displayed for the object as a comma-separated list. Multiple instances of this option can also be used to define multiple attributes. If this parameter is omitted, all viewable attributes are displayed.

alwayssensitive	keytype	sign
application	label	startdate
certificatetype	local	subject
class	modifiable	token
decrypt	modulus	unwrap
derive	modulusbits	value
encrypt	neverextractable	verify
enddate	private	wrap
extractable	publicexponent
id	sensitive
issuer	serialnumber

-handle=<handle#>

The object handle. If this parameter is omitted and there is only one object on the HSM, that object is automatically selected. If this parameter is omitted and there are multiple objects on the HSM, you are prompted to select the object.

-outputFile=<filename>

Defines the filename to which the attribute set is written. If this parameter is omitted, the attribute set is written to the display.

Common

-password=<password>

The password for the role accessing the current slot, with the current command. If this is not specified, it is prompted.

-slot=<slot#>

The slot to be acted upon, by the current command. If this is not specified, it is prompted.

Example

The following command outputs all of the viewable attributes for the object with handle 46:

cmu getAttribute -handle=46

The following command outputs the label, public exponent and modulus of key 9 to file keydata.txt:

cmu getAttribute -handle=9 -attribute=label,publicExponent,modulus -outputFile=keydata.txt