oct-admin-generate(1)

oct-admin-generate1

Generate a key on the card

Usage

oct {admin generate <-o | --output> [--no-dec] [--no-aut] <-u | --userid> [{-p | --user-pin}] [{-h | --help}] [algorithm]}

Overview

Generate a Key on the card.

A signing key is always created, decryption and authentication keys are optional.

Options

-o, --output <output>

Output file

--no-dec

Do not create a key in the DEC slot

--no-aut

Do not create a key in the AUT slot

-u, --userid <User ID>

User ID to add to the exported certificate representation

-p, --user-pin <User PIN file>

Optionally, get User PIN from a file

-h, --help

Print help (see a summary with '-h')

[algorithm]

Choose the algorithm for the key material to generate on the card.

If the parameter is not given, use the algorithm currently set on the card.

Specific cards support a set of algorithms that can differ between models. On modern cards,
use 'oct info' to see the list of supported algorithms.

Possible values:

•

rsa2048

•

rsa3072

•

rsa4096

•

nistp256

•

nistp384

•

nistp521

•

curve25519

From openpgp-card-tools 0.11.13-1 in Arch Linux 2026-11-01. Parsed by carta from the page's man source.