System information

tksTool -P -d dbdir [-p dbprefix] [-f pwfile]
• Renaming a symmetric key.
tksTool -R -n keyname -r new_keyname -d dbdir [-h token_name]
[-p dbprefix] [-f pwfile]
• Listing all security modules.
tksTool -S -d dbdir [-p dbprefix] [-x]
• Generating a new transport key.
tksTool -T -n keyname -d dbdir [-h token_name]
[-p dbprefix] [-f pwfile] [-z noiseFile]
• Unwrapping a wrapped master key.
tksTool -U -n keyname -d dbdir -t transport_keyname -i inputFile
[-h token_name] [-p dbprefix] [-f pwfile]
• Wrapping a new master key.
tksTool -W -n keyname -d dbdir -t transport_keyname -o outputFile
[-h token_name] [-p dbprefix] [-f pwfile]
NOTE
Chrysalis-ITS version 2.3 is required to support version 1.0 of the -R option of
the tksTool.
Transport keys residing on Chrysalis-ITS hardware tokens created by an earlier
version of tksTool cannot have their KCV values determined with the -K option
of the tksTool because the CKA_ENCRYPT and CKF_ENCRYPT bits were not set
when they were created by the previous tool.
Chapter 11. TKS Tool
42