# commands

- [info](/yubikey5/piv-1/commands/info.md): Manage the PIV Application.
- [reset](/yubikey5/piv-1/commands/reset.md): Reset all PIV data. This action wipes all data and restores factory settings for the PIV application on your YubiKey.
- [access](/yubikey5/piv-1/commands/access.md): Manage PIN, PUK, and Management Key.
- [change-management-key](/yubikey5/piv-1/commands/access/change-management-key.md): Change the management key. Management functionality is guarded by a management key. This key is required for administrative tasks, such as generating key pairs. A random key may be generated and store
- [change-pin](/yubikey5/piv-1/commands/access/change-pin.md): Change the management key. Management functionality is guarded by a management key. This key is required for administrative tasks, such as generating key pairs. A random key may be generated and store
- [change-puk](/yubikey5/piv-1/commands/access/change-puk.md): Change the PUK code. If the PIN is lost or blocked it can be reset using a PUK. The PUK must be between 6 and 8 characters long, and it can be any type of alphanumeric character.
- [set-retries](/yubikey5/piv-1/commands/access/set-retries.md): Set the number of PIN and PUK retry attempts.
- [unblock-pin](/yubikey5/piv-1/commands/access/unblock-pin.md): Unblock the PIN (using PUK).
- [certificates ](/yubikey5/piv-1/commands/certificates.md): Manage certificates.
- [delete](/yubikey5/piv-1/commands/certificates/delete.md): Delete a certificate. Delete a certificate from a PIV slot on the YubiKey.
- [export](/yubikey5/piv-1/commands/certificates/export.md): Export an X.509 certificate. Reads a certificate from one of the PIV slots on the YubiKey.
- [generate](/yubikey5/piv-1/commands/certificates/generate.md): Generate a self-signed X.509 certificate. A self-signed certificate is generated and written to one of the slots on the YubiKey. A private key must already be present in the corresponding key slot.
- [import](/yubikey5/piv-1/commands/certificates/import.md): Import an X.509 certificate. Write a certificate to one of the PIV slots on the YubiKey.
- [request](/yubikey5/piv-1/commands/certificates/request.md): Generate a Certificate Signing Request (CSR). A private key must already be present in the corresponding key slot.
- [keys](/yubikey5/piv-1/commands/keys.md): Manage private keys.
- [attest](/yubikey5/piv-1/commands/keys/attest.md): Generate an attestation certificate for a key pair. Attestation is used to show that an asymmetric key was generated on the YubiKey and therefore doesn’t exist outside the device.
- [export](/yubikey5/piv-1/commands/keys/export.md): Export a public key corresponding to a stored private key. This command uses several different mechanisms for exporting the public key corresponding to a stored private key.
- [generate](/yubikey5/piv-1/commands/keys/generate.md): Generate an asymmetric key pair. The private key is generated on the YubiKey, and written to one of the slots.
- [import](/yubikey5/piv-1/commands/keys/import.md): Import a private key from file. Write a private key to one of the PIV slots on the YubiKey.
- [objects](/yubikey5/piv-1/commands/objects.md): Manage PIV data objects.
- [export](/yubikey5/piv-1/commands/objects/export.md): Export an arbitrary PIV data object.
- [generate](/yubikey5/piv-1/commands/objects/generate.md): Generate and write data for a supported data object.
- [import](/yubikey5/piv-1/commands/objects/import.md): Write an arbitrary PIV object. Write a PIV object by providing the object id. Yubico writable PIV objects are available in the range 5f0000 - 5fffff.