Uploading Certificates Generated from a CSR
Learn how to upload the signed certificate required for initialization of a new HSM cluster in OCI Dedicated Key Management.
The third step is to upload the certificates generated from the certificate signing request (CSR). The certificates are the Partition certificate (partitionCert.pem) and the Partition Owner certificate (partitionOwnerCert.pem).
Complete the following steps to activate the HSM cluster:
-
In the HSM Cluster summary table, find a cluster in "Initialization Required" state, select the the Actions menu
and then select Download & Upload Certificates.
Note: The Download & Upload Certificates option is visible only for HSM partitions in "Initialization required" state.
-
In the HSM Cluster summary table, find a cluster in "Initialization Required" state, select the the Actions menu
Open a command prompt and run
upload-partition-certificatesto download the certificate.oci kms kms-hsm-cluster hsm-cluster upload-partition-certificates --hsm-cluster-idFor example:
oci kms kms-hsm-cluster hsm-cluster upload-partition-certificates --hsm-cluster-id, --partition-certificate, --partition-owner-certificateFor a complete list of parameters and values for CLI commands, see KMS CLI Command Reference.
Use the UploadPartitionCertificates API with the KMSHSMCLUSTER endpoint to upload the partition owner certificates to the HSM Cluster resource.
Note
Each region uses the KMSHSMCLUSTER API endpoint for HSM cluster operations. For regional endpoints, see the API Endpoints.