Red Hat CERTIFICATE SYSTEM 8 - COMMAND-LINE Manual page 82

Chapter 25. tpsclient
op.format.tokenKey.update.symmetricKeys.enable=true
op.format.tokenKey.update.symmetricKeys.requiredVersion=2
This setting instructs the TPS to upgrade the token from version 1 to version 2 during the
tpsclient format operation.
3. Format the token using tpsclient, as follows:
tpsclient
Command>op=token_set cuid=a00192030405060708c9 app_ver=6FBBC105 key_info=0101
Command>op=token_set auth_key=404142434445464748494a4b4c4d4e4f
Command>op=token_set mac_key=404142434445464748494a4b4c4d4e4f
Command>op=token_set kek_key=404142434445464748494a4b4c4d4e4f
Command>op=ra_format uid=jsmith pwd=password num_threads=1 new_pin=password
The CUID can be any 10-byte string; it affects how the TKS computes the new key set for
tpsclient.
TIP
Because it can be tedious to type each operation and parameter through the
command line, it is possible to create an input file and then point the tpsclient
command to the file. For example:
tpsclient < /tmp/input.txt
Example 25.1, "Example tpsclient Enrollment Input File"
tpsclient Format Input File"
The command prompt will return any output given by tpsclient during the operation
and the final result of the command.
4. After running the format operation, tpsclient prints the new key set in the standard output.
Save the new values in a new tpsclient input file. The input file can then be used with a
production TPS server.
tpsclient can be used for formatting operations or for enrollment operations. The sample input file
for an enrollment operation is shown in
op=var_set name=ra_host value=server.example.com
op=var_set name=ra_port value=7888
op=var_set name=ra_uri value=/nk_service
op=token_set cuid=00000000000000000001
msn=01020304 app_ver=6FBBC105 key_info=0101 major_ver=0 minor_ver=0
op=token_set auth_key=404142434445464748494a4b4c4d4e4f
op=token_set mac_key=404142434445464748494a4b4c4d4e4f
op=token_set kek_key=404142434445464748494a4b4c4d4e4f
op=ra_enroll uid=jdoe pwd=password new_pin=password num_threads=1
Example 25.1. Example tpsclient Enrollment Input File
70
both list examples for an input file.
Example 25.1, "Example tpsclient Enrollment Input
Example 25.2, "Example
and
File".