AutoIt Requires Chilkat v11.0.0+

AWS KMS Import PFX Key

See more AWS KMS Examples

Imports a certificate's private key from a .pfx file to new key created in AWS KMS. AutoIt

Local $bSuccess = False

;  This example requires the Chilkat API to have been previously unlocked.
;  See Global Unlock Sample for sample code.

;  Note: This example is using a relative file path.  You can also specify a full file path, such as "C:/someDir/myCertAndKey.pfx"
;  or a file path the makes sense on non-Windows operating systems..
$oCert = ObjCreate("Chilkat.Cert")
$bSuccess = $oCert.LoadPfxFile("qa_data/pfx/myCertAndKey.pfx","pfx_password")
If ($bSuccess = False) Then
    ConsoleWrite($oCert.LastErrorText & @CRLF)
    Exit
EndIf

;  Get the cert's private key.  This is what will be uploaded to AWS KMS.
$oPrivKey = ObjCreate("Chilkat.PrivateKey")
$bSuccess = $oCert.GetPrivateKey($oPrivKey)
If ($bSuccess = False) Then
    ConsoleWrite($oCert.LastErrorText & @CRLF)
    Exit
EndIf

$oJson = ObjCreate("Chilkat.JsonObject")
$oJson.UpdateString("service","aws-kms")
$oJson.UpdateString("auth.access_key","AWS_ACCESS_KEY")
$oJson.UpdateString("auth.secret_key","AWS_SECRET_KEY")
$oJson.UpdateString("auth.region","us-west-2")
$oJson.UpdateString("description","Test of uploading existing private key to AWS KMS")

;  Let's add some information about the certificate this key belongs to.
;  This is for informational purposes only, so that we can examine the tags
;  in the AWS KMS console and know the corresponding certificate.
$oJson.UpdateString("tags[0].key","CertSerial")
$oJson.UpdateString("tags[0].value",$oCert.SerialNumber)
$oJson.UpdateString("tags[1].key","CertIssuer")
$oJson.UpdateString("tags[1].value",$oCert.IssuerCN)
$oJson.UpdateString("tags[2].key","CertSubject")
$oJson.UpdateString("tags[2].value",$oCert.SubjectCN)

$oJson.UpdateString("keyUsage","SIGN_VERIFY")

;  The UploadToCloud method was added in Chilkat v9.5.0.96
$oJsonOut = ObjCreate("Chilkat.JsonObject")
$bSuccess = $oPrivKey.UploadToCloud($oJson,$oJsonOut)
If ($bSuccess = False) Then
    ConsoleWrite($oPrivKey.LastErrorText & @CRLF)
    Exit
EndIf

;  When successful, the jsonOut contains information about the private key in AWS KMS.
;  Most importantly, the KeyId.
$oJsonOut.EmitCompact = False
ConsoleWrite($oJsonOut.Emit() & @CRLF)

;  Sample JSON result:

;  {
;    "AWSAccountId": "954491834127",
;    "Arn": "arn:aws:kms:us-west-2:954491834127:key/187012e8-008f-4fc7-b100-5efe6146dff2",
;    "KeySpec": "RSA_4096",
;    "Description": "Test of uploading existing private key to AWS KMS",
;    "KeyId": "187012e8-008f-4fc7-b100-5efe6146dff2",
;    "KeyUsage": "SIGN_VERIFY"
;  }