Skip to main content

KeyStorageCapabilities

The set of capabilities the storage location is able to perform

type KeyStorageCapabilities {
keyCreation: Boolean!
keyImport: Boolean!
keyExport: Boolean!
sign: Boolean!
signCSR: Boolean!
decrypt: Boolean!
derive: Boolean!
signingMechanisms: [Int!]
decryptionMechanisms: [Int!]
derivationMechanisms: [Int!]
supportedParameterSets: [KeyParameterSet!]
}

Fields

KeyStorageCapabilities.keyCreation ● Boolean! non-null scalar

True if the Key Storage Location allows minting new keys

KeyStorageCapabilities.keyImport ● Boolean! non-null scalar

True if the Key Storage Location allows importing keys

KeyStorageCapabilities.keyExport ● Boolean! non-null scalar

True if the Key Storage Location allows exporting keys

KeyStorageCapabilities.sign ● Boolean! non-null scalar

True if the Key Storage Location supports signing

KeyStorageCapabilities.signCSR ● Boolean! non-null scalar

True if the Key Storage Location supports generating and signing CSRs

KeyStorageCapabilities.decrypt ● Boolean! non-null scalar

True if the Key Storage Location supports decryption

KeyStorageCapabilities.derive ● Boolean! non-null scalar

True if the Key Storage Location supports key derivation

KeyStorageCapabilities.signingMechanisms ● [Int!] list scalar

A list of PKCS#11 CK_MECHANISM_TYPE representing the algorithms that are supported for signing operations

KeyStorageCapabilities.decryptionMechanisms ● [Int!] list scalar

A list of PKCS#11 CK_MECHANISM_TYPE representing the algorithms that are supported for decryption operations

KeyStorageCapabilities.derivationMechanisms ● [Int!] list scalar

A list of PKCS#11 CK_MECHANISM_TYPE representing the algorithms that are supported for key derivation operations

KeyStorageCapabilities.supportedParameterSets ● [KeyParameterSet!] list enum

A list of parameter sets that may be used with this location when creating a key pair

Member Of

KeyStorageDriver object ● KeyStorageLocation object