# change-management-key

## <mark style="color:red;">ykman piv</mark> access change-management-key <mark style="color:red;">OPTIONS</mark>

<table><thead><tr><th width="284">Options</th><th>Description</th></tr></thead><tbody><tr><td><mark style="color:red;">-h, --help</mark></td><td>Show this message and exit.</td></tr><tr><td><mark style="color:red;">-a, --algorithm [TDES| AES128|AES192|AES256]</mark></td><td>Management key algorithm. [Default: <mark style="color:red;"><code>TDES</code></mark>]</td></tr><tr><td><mark style="color:red;">-f, --force</mark></td><td>Confirm the action without prompting.</td></tr><tr><td><mark style="color:red;">-g, --generate</mark></td><td>Generate a random management key. Implied by <mark style="color:red;"><code>--protect</code></mark> unless <mark style="color:red;"><code>--new-management-key</code></mark> is also given. Conflicts with <mark style="color:red;"><code>--new-management-key</code></mark>.</td></tr><tr><td><mark style="color:red;">-m, --management-key TEXT</mark></td><td>Current management key.</td></tr><tr><td><mark style="color:red;">-n, --new-management-key TEXT</mark></td><td>New management key.</td></tr><tr><td><mark style="color:red;">-p, --protect</mark></td><td>Store new management key on the YubiKey, protected by PIN. A random key is used if no key is provided.</td></tr><tr><td><mark style="color:red;">-P, --pin TEXT</mark></td><td>PIN code.</td></tr><tr><td><mark style="color:red;">-t, --touch</mark></td><td>Require touch on YubiKey when prompted for management key.</td></tr></tbody></table>

### <mark style="color:blue;">HELP</mark>

{% tabs %}
{% tab title="Help Command" %}

```properties
Usage: ykman.exe piv access change-management-key [OPTIONS]

  Change the management key.

  Management functionality is guarded by a management key. This key is required for administrative tasks, such as generating key pairs. A random
  key may be generated and stored on the YubiKey, protected by PIN.

Options:
  -P, --pin TEXT                  PIN code.
  -t, --touch                     Require touch on YubiKey when prompted for management key.
  -n, --new-management-key TEXT   A new management key.
  -m, --management-key TEXT       Current management key.
  -a, --algorithm [TDES|AES128|AES192|AES256]
                                  Management key algorithm.  [default: TDES]
  -p, --protect                   Store new management key on the YubiKey, protected by PIN. A random key will be used if no key is provided.
  -g, --generate                  Generate a random management key. Implied by --protect unless --new-management-key is also given. Conflicts
                                  with --new-management-key.
  -f, --force                     Confirm the action without prompting.
  -h, --help                      Show this message and exit.
```

{% endtab %}
{% endtabs %}


---

# Agent Instructions: Querying This Documentation

If you need additional information that is not directly available in this page, you can query the documentation dynamically by asking a question.

Perform an HTTP GET request on the current page URL with the `ask` query parameter:

```
GET https://yubico.gitbook.io/yubikey5/piv-1/commands/access/change-management-key.md?ask=<question>
```

The question should be specific, self-contained, and written in natural language.
The response will contain a direct answer to the question and relevant excerpts and sources from the documentation.

Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.