Saves a copy of the nShield Security World keys and configuration currently loaded in Validation Authority. You can later import it with evactl import-nshield, even in a different deployment of Validation Authority.

evactl export-nshield -o <kmdata_dir> [-t]

For example:

$ sudo evactl export-nshield -f /opt/nfast/copy-kmdata

See below for a description of each option.

The root user owns generated files, so you must change their permissions to download them using SFTP – for example, sudo chmod 644 config.tar.gz

-o <output-directory>

Save the configuration in the <output-directory> folder.

Mandatory: Yes.

-t

Save the configuration in the following compressed file.

<kmdata_dir>/kmdata.tar.gz

Mandatory. No. When omitting this option, the command does not compress the configuration in the <output-directory> folder.