Extract authentication key

You use the apsedkey extract command to extract the AEK defined in the keystore and save the plain text key for a specific key label to a file.


  1. Log in as apadmin or equivalent user i any of the Control Nodes of the system.
  2. Run the following command to extract an AEK into an external file:
    apsedkey extract --file <file>
    The command extracts the currently enabled key into the file specified by the –file argument. Works only once apsedkey enable has been called.

    Sample output:

    [apadmin@e1n1]# apsedkey extract –file /tmp/currentkey.txt
    Extracted key to /tmp/currentkey.txt