oct-admin-generate(1)

💖 NAME 💖

okay so bestie, this is oct-admin-generate(1) from the General Commands Manual — the page all about generating a key on the card ✨. The name is oct-admin-generate — Generate a Key on the card. Periodt 💅.

🫶 SYNOPSIS 🫶

The exact call, character for character, no cap:

oct admin generate <-o|--output> [--no-dec] [--no-aut] <-u|--userid>
[-p|--user-pin] [-h|--help] [algorithm]

💅 DESCRIPTION 💅

Generate a Key on the card. That's the vibe and the whole job 😌.

The way that this works: a signing key is always created — always, bestie, main character energy. Decryption and authentication keys are optional, so you can skip them with the flags below 🎀.

🎀 OPTIONS 🎀

• -o, --output <output> — Output file. It's giving “where the output goes,” bestie 💖.
• --no-dec — Do not create a key in the DEC slot. So the DEC slot gets no new key, fr fr.
• --no-aut — Do not create a key in the AUT slot. Same energy for the AUT slot 💀.
• -u, --userid <User ID> — User ID to add to the exported certificate representation. That's the User ID that goes into the exported certificate representation, iykyk 🦋.
• -p, --user-pin <User PIN file> — Optionally, get User PIN from a file. Optional is literally in the name of the vibe here 🙈.
• -h, --help — Print help (see a summary with -h). Iconic little helper behavior ✨.
• [algorithm] — Choose the algorithm for the key material to generate on the card.

If the parameter is not given, use the algorithm currently set on the card.

Specific cards support a set of algorithms that can differ between models. On modern cards, use 'oct info' to see the list of supported algorithms.

Possible values:

• rsa2048
• rsa3072
• rsa4096
• nistp256
• nistp384
• nistp521
• curve25519

Cute sign-off 💌: footer source/version energy is oct-admin-generate + oct-admin-generate(1), and the date slot isn't shown in this footer — so no fake date, bestie 🫶. Byeee 👑💅