---
title: "GET /api/v1/cert-manager/hsm-connectors/{connectorId}/keys"
method: GET
path: "/api/v1/cert-manager/hsm-connectors/{connectorId}/keys"
tags: ["HSM Connectors"]
---

# GET /api/v1/cert-manager/hsm-connectors/{connectorId}/keys

`GET /api/v1/cert-manager/hsm-connectors/{connectorId}/keys`

## Request

- Base URL: `https://us.infisical.com`
- URL: `https://us.infisical.com/api/v1/cert-manager/hsm-connectors/{connectorId}/keys`
- Auth: none declared

## Path parameters

- `connectorId` string, uuid, required

## Query parameters

- `label` string, required

## Response `200`

Default Response

- object
  - `keys` object[], required: The private keys in the HSM Connector's slot that have the label, sorted by key ID.
    - `keyId` string, required: The hex-encoded PKCS#11 key ID (CKA_ID). Empty when the key has none.
    - `keyAlgorithm` string, required: The key's algorithm, such as RSA_3072 or ECC_P256. Empty when it can't be determined.

## Other responses

- `400`: Default Response
- `401`: Default Response
- `403`: Default Response
- `404`: Default Response
- `422`: Default Response
- `500`: Default Response

## Changes

- **2026-10-21** `50b9a16ac93a`: 1 info
  - endpoint added

[Operation history](https://skmtc.dev/infisical/apis/infisical-api/changes/api/v1/cert-manager/hsm-connectors/:connectorId/keys/get.md)

---

[API](https://skmtc.dev/infisical/apis/infisical-api.md) - [All operations](https://skmtc.dev/infisical/apis/infisical-api/llms.txt) - [OpenAPI document](https://skmtc.dev/infisical/apis/infisical-api/revisions/7f940199c899?raw)