All drives do not support REPORT_KEY with format 0x38, so we need to cache the certificate from aacs authentication procedure.