Extract authentication key

You use the apsedkey extract command to extract the AEK defined in the keystore and save the plain text key for a specific key label to a file.

Procedure

  1. Log in as apuser or equivalent user.
  2. Run the following command to extract an AEK into an external file:
    apsedkey extract --file <file>
    The command extracts the currently enabled key into the file specified by the –file argument. Works only once apsedkey enable has been called.

    Sample output:

    [apuser@sfm02-node0103]# apsedkey extract –file /tmp/currentkey.txt
    Extracted key to /tmp/currentkey.txt