tpmtoken_import(1)

💖 tpmtoken_import(1) 💖

okay bestie, welcome to the General Commands Manual, section 1 — yes this is a whole manual page and yes it's about to be your new obsession. this one's called tpmtoken_import, and it lives in the TPM Management family. buckle up 🎀

✨ NAME ✨

tpmtoken_import — import an X.509 certficate and/or an RSA key pair into the user's TPM PKCS#11 data store

not me spelling "certficate" exactly like the original did, i'm keeping every detail fr fr 💀

🌸 SYNOPSIS 🌸

🦋 DESCRIPTION 🦋

so what does it actually do? tpmtoken_import imports a PEM formatted representation of an X.509 certificate and/or an RSA key contained in FILE. that's the whole vibe. ✨

now, importing an X.509 certificate creates an X.509 Public Key Certificate PKCS#11 object and also an RSA Public Key PKCS#11 object using the RSA public key contained in the certificate. the way that works? the certificate's key must be an RSA key in order for the certificate to be successfully processed by this command. no RSA, no slay, sorry. 😭

importing an RSA key creates an RSA Public Key and an RSA Private Key PKCS#11 object. and here's the tea: in order to associate the RSA PKCS#11 objects with an X.509 Public Key Certificate PKCS#11 object, the RSA PKCS#11 objects must have a subject name and key identifier associated with them. how do you do that? by supplying the corresponding X.509 certificate as an optional command parameter. easy 💅

and the input? it can contain PEM formatted representations of both an X.509 certificate and an RSA key. if both representations are present then an X.509 Public Key Certificate PKCS#11 object, an RSA Public Key PKCS#11 object and an RSA Private Key PKCS#11 object are created. three for one, iconic behavior honestly 👑

💅 OPTIONS 💅

• -h, --help — Display command usage info. your lil "what am i doing" button 🫶
• -v, --version — Display command version info. the receipts, basically 🌈
• -l, --log [none|error|info|debug] — Set logging level. pick your volume: none, error, info, or debug 🔥
• -i, --idfile FILE — Use FILE as the PEM formatted X.509 certificate input used to obtain the subject and id attributes 🎀
• -k, --token STRING — Use STRING to identify the label of the PKCS#11 token to be used 🔑
• -n, --name STRING — Use STRING as the label for the imported object(s) ⭐
• -p, --public — Import the object(s) as a public object 👀
• -t, --type key|cert — Import only the specified object type. it's key or cert, pick one bestie 🙈
• -y, --yes — Assume an answer of yes for any confirmation prompts that would normally be asked. consent button = auto-on, use responsibly 💜

🌈 SEE ALSO 🌈

• tpmtoken_init(1)
• tpmtoken_setpasswd(1)
• tpmtoken_objects(1)
• tpmtoken_protect(1)

the whole friend group, go say hi 🧚

🍓 REPORTING BUGS 🍓

Report bugs to <trousers-users@lists.sourceforge.net>

found a bug? tell the mailing list, not me, i'm just the messenger 😭

k that's the whole page bestie, you ate 💖 this was TPM Management, dated 2005-04-25, and you just read tpmtoken_import(1). periodt ✨👑🦋