Red Hat CERTIFICATE SYSTEM 7.3 - COMMAND-LINE Technical Information PDF herunterladen (Seite 54)

tksTool -P -d dbdir [-p dbprefix] [-f pwfile]

• Renaming a symmetric key.

tksTool -R -n keyname -r new_keyname -d dbdir [-h token_name]

[-p dbprefix] [-f pwfile]

• Listing all security modules.

tksTool -S -d dbdir [-p dbprefix] [-x]

• Generating a new transport key.

tksTool -T -n keyname -d dbdir [-h token_name]

[-p dbprefix] [-f pwfile] [-z noiseFile]

• Unwrapping a wrapped master key.

tksTool -U -n keyname -d dbdir -t transport_keyname -i inputFile

[-h token_name] [-p dbprefix] [-f pwfile]

• Wrapping a new master key.

tksTool -W -n keyname -d dbdir -t transport_keyname -o outputFile

[-h token_name] [-p dbprefix] [-f pwfile]

NOTE

Chrysalis-ITS version 2.3 is required to support version 1.0 of the -R option of

the tksTool.

Transport keys residing on Chrysalis-ITS hardware tokens created by an earlier

version of tksTool cannot have their KCV values determined with the -K option

of the tksTool because the CKA_ENCRYPT and CKF_ENCRYPT bits were not set

when they were created by the previous tool.

Chapter 11. TKS Tool

1 2 ... 49 50 51 52 53 54 55 56 57 58 59 ... 103 104

Keine Kommentare

Red Hat CERTIFICATE SYSTEM 7.3 - COMMAND-LINE Technical Information Seite 54