oct-admin-generate1
Generate a key on the card
Usage
oct {admin
generate
<-o | --output>
[--no-dec]
[--no-aut]
<-u | --userid>
[{-p | --user-pin}]
[{-h | --help}]
[algorithm]}
Overview
Generate a Key on the card.
A signing key is always created, decryption and authentication keys are optional.
Options
-
-o, --output <output> -
Output file
-
--no-dec -
Do not create a key in the DEC slot
-
--no-aut -
Do not create a key in the AUT slot
|
User ID to add to the exported certificate representation |
|---|---|
|
Optionally, get User PIN from a file |
-
-h, --help -
Print help (see a summary with '-h')
- [algorithm]
-
Choose the algorithm for the key material to generate on the card.
If the parameter is not given, use the algorithm currently set on the card.
Specific cards support a set of algorithms that can differ between models. On modern cards,
use 'oct info' to see the list of supported algorithms.Possible values:
- •
-
rsa2048
- •
-
rsa3072
- •
-
rsa4096
- •
-
nistp256
- •
-
nistp384
- •
-
nistp521
- •
-
curve25519