Install storage array external key management certificate - SANtricity CLI

11/17/2025 Contributors

The download storageArray keyManagementCertificate command installs the external key management certificates on the storage array.

Supported Arrays

This command applies to an individual E4000, E2800, E5700, EF600, EF300, EF50, and EF80 storage arrays. It does not operate on E2700 or E5600 storage arrays.

Roles

To execute this command on an E4000, E2800, E5700, EF600, EF300, EF50, or EF80 storage array, you must have the Security Admin role.

Context

This command applies only to external key management.

Syntax

download storageArray keyManagementClientCertificate certificateType=(client|server) file="filename" [privateKeyFile = "keyFileName"]

Parameters

Parameter Description

Parameter	Description
`certificateType`	Allows you to specify the certificate file type. Valid choices are `client` or `server`.
`file`	Allows you to specify the client signed certificate or server root/intermediate CA certificate. The file must be in PEM/DER format.
`privateKeyFile`	Allows you to download a private key alongside a signed certificate. The `privateKeyFile` parameter must be used with `certificateType=client` value.

certificateType

Allows you to specify the certificate file type. Valid choices are client or server.

file

Allows you to specify the client signed certificate or server root/intermediate CA certificate. The file must be in PEM/DER format.

privateKeyFile

Allows you to download a private key alongside a signed certificate. The privateKeyFile parameter must be used with certificateType=client value.

Examples

SMcli -n Array1 -c "download storageArray keyManagementClientCertificate certificateType=client
   file="C:\serverSignedKeyMgmtClientCert.cer";"


SMcli completed successfully.

Minimum firmware level

8.40