man.pkcs11-keygen.html revision 975ff35d8501bd2ef5f9541c4dac1157efc1609d
edb348833aaacfa1176e502ad38875fd0b2717abAdam H. Leventhal<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN" "http://www.w3.org/TR/html4/loose.dtd">
edb348833aaacfa1176e502ad38875fd0b2717abAdam H. Leventhal - Copyright (C) 2000-2016 Internet Systems Consortium, Inc. ("ISC")
edb348833aaacfa1176e502ad38875fd0b2717abAdam H. Leventhal - This Source Code Form is subject to the terms of the Mozilla Public
edb348833aaacfa1176e502ad38875fd0b2717abAdam H. Leventhal - License, v. 2.0. If a copy of the MPL was not distributed with this
edb348833aaacfa1176e502ad38875fd0b2717abAdam H. Leventhal - file, You can obtain one at http://mozilla.org/MPL/2.0/.
edb348833aaacfa1176e502ad38875fd0b2717abAdam H. Leventhal<meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1">
edb348833aaacfa1176e502ad38875fd0b2717abAdam H. Leventhal<meta name="generator" content="DocBook XSL Stylesheets V1.78.1">
edb348833aaacfa1176e502ad38875fd0b2717abAdam H. Leventhal<link rel="home" href="Bv9ARM.html" title="BIND 9 Administrator Reference Manual">
edb348833aaacfa1176e502ad38875fd0b2717abAdam H. Leventhal<link rel="up" href="Bv9ARM.ch13.html" title="Manual pages">
edb348833aaacfa1176e502ad38875fd0b2717abAdam H. Leventhal<link rel="prev" href="man.pkcs11-list.html" title="pkcs11-list">
edb348833aaacfa1176e502ad38875fd0b2717abAdam H. Leventhal<link rel="next" href="man.pkcs11-tokens.html" title="pkcs11-tokens">
edb348833aaacfa1176e502ad38875fd0b2717abAdam H. Leventhal<body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF">
edb348833aaacfa1176e502ad38875fd0b2717abAdam H. Leventhal<table width="100%" summary="Navigation header">
edb348833aaacfa1176e502ad38875fd0b2717abAdam H. Leventhal<tr><th colspan="3" align="center"><span class="application">pkcs11-keygen</span></th></tr>
edb348833aaacfa1176e502ad38875fd0b2717abAdam H. Leventhal<a accesskey="p" href="man.pkcs11-list.html">Prev</a>�</td>
edb348833aaacfa1176e502ad38875fd0b2717abAdam H. Leventhal<th width="60%" align="center">Manual pages</th>
edb348833aaacfa1176e502ad38875fd0b2717abAdam H. Leventhal<td width="20%" align="right">�<a accesskey="n" href="man.pkcs11-tokens.html">Next</a>
edb348833aaacfa1176e502ad38875fd0b2717abAdam H. Leventhal<a name="man.pkcs11-keygen"></a><div class="titlepage"></div>
edb348833aaacfa1176e502ad38875fd0b2717abAdam H. Leventhal <span class="application">pkcs11-keygen</span>
edb348833aaacfa1176e502ad38875fd0b2717abAdam H. Leventhal — generate keys on a PKCS#11 device
edb348833aaacfa1176e502ad38875fd0b2717abAdam H. Leventhal <code class="command">pkcs11-keygen</code>
edb348833aaacfa1176e502ad38875fd0b2717abAdam H. Leventhal {-a <em class="replaceable"><code>algorithm</code></em>}
edb348833aaacfa1176e502ad38875fd0b2717abAdam H. Leventhal [<code class="option">-b <em class="replaceable"><code>keysize</code></em></code>]
edb348833aaacfa1176e502ad38875fd0b2717abAdam H. Leventhal [<code class="option">-i <em class="replaceable"><code>id</code></em></code>]
edb348833aaacfa1176e502ad38875fd0b2717abAdam H. Leventhal [<code class="option">-m <em class="replaceable"><code>module</code></em></code>]
edb348833aaacfa1176e502ad38875fd0b2717abAdam H. Leventhal [<code class="option">-p <em class="replaceable"><code>PIN</code></em></code>]
edb348833aaacfa1176e502ad38875fd0b2717abAdam H. Leventhal [<code class="option">-s <em class="replaceable"><code>slot</code></em></code>]
edb348833aaacfa1176e502ad38875fd0b2717abAdam H. Leventhal<a name="id-1.14.38.7"></a><h2>DESCRIPTION</h2>
edb348833aaacfa1176e502ad38875fd0b2717abAdam H. Leventhal <span class="command"><strong>pkcs11-keygen</strong></span> causes a PKCS#11 device to generate
edb348833aaacfa1176e502ad38875fd0b2717abAdam H. Leventhal a new key pair with the given <code class="option">label</code> (which must be
edb348833aaacfa1176e502ad38875fd0b2717abAdam H. Leventhal unique) and with <code class="option">keysize</code> bits of prime.
edb348833aaacfa1176e502ad38875fd0b2717abAdam H. Leventhal<a name="id-1.14.38.8"></a><h2>ARGUMENTS</h2>
edb348833aaacfa1176e502ad38875fd0b2717abAdam H. Leventhal <div class="variablelist"><dl class="variablelist">
edb348833aaacfa1176e502ad38875fd0b2717abAdam H. Leventhal<dt><span class="term">-a <em class="replaceable"><code>algorithm</code></em></span></dt>
edb348833aaacfa1176e502ad38875fd0b2717abAdam H. Leventhal Specify the key algorithm class: Supported classes are RSA,
edb348833aaacfa1176e502ad38875fd0b2717abAdam H. Leventhal DSA, DH, and ECC. In addition to these strings, the
edb348833aaacfa1176e502ad38875fd0b2717abAdam H. Leventhal <code class="option">algorithm</code> can be specified as a DNSSEC
edb348833aaacfa1176e502ad38875fd0b2717abAdam H. Leventhal signing algorithm that will be used with this key; for
edb348833aaacfa1176e502ad38875fd0b2717abAdam H. Leventhal example, NSEC3RSASHA1 maps to RSA, and ECDSAP256SHA256 maps
edb348833aaacfa1176e502ad38875fd0b2717abAdam H. Leventhal to ECC. The default class is "RSA".
edb348833aaacfa1176e502ad38875fd0b2717abAdam H. Leventhal<dt><span class="term">-b <em class="replaceable"><code>keysize</code></em></span></dt>
edb348833aaacfa1176e502ad38875fd0b2717abAdam H. Leventhal Create the key pair with <code class="option">keysize</code> bits of
edb348833aaacfa1176e502ad38875fd0b2717abAdam H. Leventhal prime. For ECC keys, the only valid values are 256 and 384,
edb348833aaacfa1176e502ad38875fd0b2717abAdam H. Leventhal and the default is 256.
edb348833aaacfa1176e502ad38875fd0b2717abAdam H. Leventhal For RSA keys only, use a large exponent.
edb348833aaacfa1176e502ad38875fd0b2717abAdam H. Leventhal<dt><span class="term">-i <em class="replaceable"><code>id</code></em></span></dt>
edb348833aaacfa1176e502ad38875fd0b2717abAdam H. Leventhal Create key objects with id. The id is either
edb348833aaacfa1176e502ad38875fd0b2717abAdam H. Leventhal an unsigned short 2 byte or an unsigned long 4 byte number.
edb348833aaacfa1176e502ad38875fd0b2717abAdam H. Leventhal<dt><span class="term">-m <em class="replaceable"><code>module</code></em></span></dt>
edb348833aaacfa1176e502ad38875fd0b2717abAdam H. Leventhal Specify the PKCS#11 provider module. This must be the full
edb348833aaacfa1176e502ad38875fd0b2717abAdam H. Leventhal path to a shared library object implementing the PKCS#11 API
edb348833aaacfa1176e502ad38875fd0b2717abAdam H. Leventhal for the device.
edb348833aaacfa1176e502ad38875fd0b2717abAdam H. Leventhal Set the new private key to be non-sensitive and extractable.
edb348833aaacfa1176e502ad38875fd0b2717abAdam H. Leventhal The allows the private key data to be read from the PKCS#11
edb348833aaacfa1176e502ad38875fd0b2717abAdam H. Leventhal device. The default is for private keys to be sensitive and
edb348833aaacfa1176e502ad38875fd0b2717abAdam H. Leventhal non-extractable.