Problem

How do you use vcckm to export certificates from VA?

Resolution

You can use vcckm - which is located in \VA\tools\entserv\vcckm.exe - to pull certificates out of your VA configuration, namely \VA\entsersv\vack.db You run it with the help option to see which options are available to you:

C:\Program Files\Axway\VA\tools>vcckm help
usage: vcckm <command> [options]
vcckm command-line client, version 2.0
type 'vcckm help <command>' for help on a specific command

available commands:
parse
password
certs
keys
Ok.

C:\Program Files\Axway\VA\tools>vcckm help certs
certs: Export certificates from CKM database.
usage: certs args
-ckm arg - input CKM database file
-certfile arg - output file with exported certificates
-certtype arg - one of following ( any, withkey, nokey . Default value is any.
Ok.

If you're not using an HSM, this can export the keys as well. If you do use an HSM, you'll have to consult the HSM docs for how to retrieve the key and it may not be possible to do so if the key is not exportable. Further information about vcckm can be found in the VA Administration Guide.