Saves a copy of the nShield Security World keys and configuration currently loaded in TSA. You can import it later with tsactl import-nshield, even in a different TSA deployment.

tsactl export-nshield -o <output-directory> [-t]

For example:

$ sudo tsactl export-nshield -o /opt/nfast/copy-kmdata

See below for a description of each option.

The root user owns generated files, so you must change their permissions to download them using SFTP – for example, sudo chmod 644 config.tar.gz

-o <output-directory>

Save the configuration in the <output-directory> folder.

Mandatory: Yes.

-t

Save the configuration in the following compressed file.

<kmdata_dir>/kmdata.tar.gz

Mandatory. No. When omitting this option, the command does not compress the configuration in the <output-directory> folder.