All drives do not support REPORT_KEY with format 0x38, so we need to
cache the certificate from aacs authentication procedure.