# change-management-key

## <mark style="color:red;">ykman piv</mark> access change-management-key <mark style="color:red;">OPTIONS</mark>

<table><thead><tr><th width="284">Options</th><th>Description</th></tr></thead><tbody><tr><td><mark style="color:red;">-h, --help</mark></td><td>Show this message and exit.</td></tr><tr><td><mark style="color:red;">-a, --algorithm [TDES| AES128|AES192|AES256]</mark></td><td>Management key algorithm. [Default: <mark style="color:red;"><code>TDES</code></mark>]</td></tr><tr><td><mark style="color:red;">-f, --force</mark></td><td>Confirm the action without prompting.</td></tr><tr><td><mark style="color:red;">-g, --generate</mark></td><td>Generate a random management key. Implied by <mark style="color:red;"><code>--protect</code></mark> unless <mark style="color:red;"><code>--new-management-key</code></mark> is also given. Conflicts with <mark style="color:red;"><code>--new-management-key</code></mark>.</td></tr><tr><td><mark style="color:red;">-m, --management-key TEXT</mark></td><td>Current management key.</td></tr><tr><td><mark style="color:red;">-n, --new-management-key TEXT</mark></td><td>New management key.</td></tr><tr><td><mark style="color:red;">-p, --protect</mark></td><td>Store new management key on the YubiKey, protected by PIN. A random key is used if no key is provided.</td></tr><tr><td><mark style="color:red;">-P, --pin TEXT</mark></td><td>PIN code.</td></tr><tr><td><mark style="color:red;">-t, --touch</mark></td><td>Require touch on YubiKey when prompted for management key.</td></tr></tbody></table>

### <mark style="color:blue;">HELP</mark>

{% tabs %}
{% tab title="Help Command" %}

```properties
Usage: ykman.exe piv access change-management-key [OPTIONS]

  Change the management key.

  Management functionality is guarded by a management key. This key is required for administrative tasks, such as generating key pairs. A random
  key may be generated and stored on the YubiKey, protected by PIN.

Options:
  -P, --pin TEXT                  PIN code.
  -t, --touch                     Require touch on YubiKey when prompted for management key.
  -n, --new-management-key TEXT   A new management key.
  -m, --management-key TEXT       Current management key.
  -a, --algorithm [TDES|AES128|AES192|AES256]
                                  Management key algorithm.  [default: TDES]
  -p, --protect                   Store new management key on the YubiKey, protected by PIN. A random key will be used if no key is provided.
  -g, --generate                  Generate a random management key. Implied by --protect unless --new-management-key is also given. Conflicts
                                  with --new-management-key.
  -f, --force                     Confirm the action without prompting.
  -h, --help                      Show this message and exit.
```

{% endtab %}
{% endtabs %}