Versions Compared
Key
- This line was added.
- This line was removed.
- Formatting was changed.
This article describes the syntax for how to generate an AES or 3DES key. The hwsetup command line tool, included in Nexus Certificate Manager (CM), is used.
Syntax
Command
| Code Block | ||||
|---|---|---|---|---|
| ||||
hwsetup -libname <pkcs11lib> [-slot <slot#>] [-id <CKA_ID>] [-label <CKA_LABEL>] [-login user|so] [-pin <PIN>] [-nopinpad] -genkey <key type> [-force] |
Options and arguments
For a description of the options libname, slot, pin, nopinpad, id, noid, label, login, extractable and force and their arguments, see Generate DSA/EC/RSA key pair.
Use this option to generate a symmetric key. Replace <key type> with the desired key type. Key types AES (128), AES-128, AES-192, AES-256 or DES3 are supported in this version.
Examples
To generate an AES 128-bit key:
| Code Block | ||||
|---|---|---|---|---|
| ||||
hwsetup -libname crypto -slot 1 -pin abcd -genkey AES -label "An AES-128 key" |
To generate a 3DES key:
| Code Block | ||||
|---|---|---|---|---|
| ||||
hwsetup -libname crypto -slot 1 -pin abcd -genkey DES3 -label "A 3DES key" |
This article is valid from CM 8.0
Related information
Options and arguments
For a description of the options libname, slot, pin, id, label, login, and their arguments, see Generate DSA/EC/RSA key pair.nopinpad, and force
| Options and Arguments | Description |
|---|---|
| genkey <key type> | Use this option to generate a symmetric key. Replace <key type> with the desired key type. Key types AES (128), AES-128, AES-192, AES-256 or DES3 are supported in this version. Default: DES3 |