Yubikey
YubicoBitwardenGPG ToolsDonate Coffee
PIV
PIV
  • Introduction
  • Getting Started
    • ⭕1. Interface
    • ⭕2. PINs
      • 🟣About
      • 🟣Defaults
      • 🟣Change
    • ⭕3. CLI
    • ⭕4. Certificates
    • ⭕5. Reset
  • SLOTS
    • ⭕9A
      • 🟣Certreq
      • 🟣OpenSSL
    • ⭕9C
    • ⭕9D
    • ⭕9E
  • Generate
    • ⭕File Extensions
    • ⭕With OpenSSL
      • 🟣distinguished_name
      • 🟣keyUsage
      • 🟣extendedKeyUsage
    • ⭕With XCA
  • commands
    • ⭕info
    • ⭕reset
    • ⭕access
      • 🟣change-management-key
      • 🟣change-pin
      • 🟣change-puk
      • 🟣set-retries
      • 🟣unblock-pin
    • ⭕certificates
      • 🟣delete
      • 🟣export
      • 🟣generate
      • 🟣import
      • 🟣request
    • ⭕keys
      • 🟣attest
      • 🟣export
      • 🟣generate
      • 🟣import
    • ⭕objects
      • 🟣export
      • 🟣generate
      • 🟣import
Powered by GitBook
On this page
  • ykman piv access change-management-key OPTIONS
  • HELP

Was this helpful?

  1. commands
  2. access

change-management-key

Change the management key. Management functionality is guarded by a management key. This key is required for administrative tasks, such as generating key pairs. A random key may be generated and store

ykman piv access change-management-key OPTIONS

Options
Description

-h, --help

Show this message and exit.

-a, --algorithm [TDES| AES128|AES192|AES256]

Management key algorithm. [Default: TDES]

-f, --force

Confirm the action without prompting.

-g, --generate

Generate a random management key. Implied by --protect unless --new-management-key is also given. Conflicts with --new-management-key.

-m, --management-key TEXT

Current management key.

-n, --new-management-key TEXT

New management key.

-p, --protect

Store new management key on the YubiKey, protected by PIN. A random key is used if no key is provided.

-P, --pin TEXT

PIN code.

-t, --touch

Require touch on YubiKey when prompted for management key.

HELP

Usage: ykman.exe piv access change-management-key [OPTIONS]

  Change the management key.

  Management functionality is guarded by a management key. This key is required for administrative tasks, such as generating key pairs. A random
  key may be generated and stored on the YubiKey, protected by PIN.

Options:
  -P, --pin TEXT                  PIN code.
  -t, --touch                     Require touch on YubiKey when prompted for management key.
  -n, --new-management-key TEXT   A new management key.
  -m, --management-key TEXT       Current management key.
  -a, --algorithm [TDES|AES128|AES192|AES256]
                                  Management key algorithm.  [default: TDES]
  -p, --protect                   Store new management key on the YubiKey, protected by PIN. A random key will be used if no key is provided.
  -g, --generate                  Generate a random management key. Implied by --protect unless --new-management-key is also given. Conflicts
                                  with --new-management-key.
  -f, --force                     Confirm the action without prompting.
  -h, --help                      Show this message and exit.

PreviousaccessNextchange-pin

Last updated 2 years ago

Was this helpful?

⭕
🟣