Tks Tool; Syntax - Red Hat CERTIFICATE SYSTEM 7.3 - COMMAND-LINE Manual

Chapter 11.

TKS Tool

The TKS utility, tksTool, manages keys, including keys stored on tokens, the TKS master key, and
related keys and databases.

11.1. Syntax

The tksTool can be used to manage certificates and keys in several different ways. The syntax for
these different operations is as follows:
• Deleting a key from a token.
tksTool -D -n keyname -d dbdir [-h token_name] [-p dbprefix] [-f pwfile]
• Inputting shares to generate a new transport key.
tksTool -I -n keyname -d dbdir [-h token_name] [-p dbprefix] [-f pwfile]
• Displaying the key check value (KCV) of the specified key.
tksTool -K -n keyname -d dbdir [-h token_name] [-p dbprefix] [-f pwfile]
• Listing a specified key or all keys.
tksTool -L -n keyname -d dbdir [-h all | -h token_name]
[-p dbprefix] [-f pwfile] [-x]
• Generating a new master key.
tksTool -M -n keyname -d dbdir [-h token_name] [-p dbprefix] [-f pwfile]
• Creating a new key database.
tksTool -N -d dbdir [-p dbprefix] [-f pwfile]
• Changing the key database password.
tksTool -P -d dbdir [-p dbprefix] [-f pwfile]
• Renaming a symmetric key.
tksTool -R -n keyname -r new_keyname -d dbdir [-h token_name]
[-p dbprefix] [-f pwfile]
39