System information
The tksTool options are as follows:
Option Description
D Deletes a key from the token.
d Required. Gives the security module
database (HSM, if allowed for that operation)
or the key database directory (software).
f Gives the path and filename of the password
file, if one is used.
h Gives the token name for the toke which
contains the key to be managed. Some
operations allow an all option to manage all
keys in the token.
I Inputs shares to generate a new transport
key.
i Required with -U. Gives the path and filename
of the input file which contains the wrapped
master key.
K Displays the KCV of the specified key.
L Lists the specified key or all keys.
M Generates a new master key.
N Creates a new key database (software).
n Required for every operation except -N, -P,
and -S. Gives the name of the key being
managed.
o Required with -W. Gives the path and
filename for the file to which to output the new
wrapped master key.
P Changes the key database password
(software).
p Gives the prefix to the key database directory.
R Renames a symmetric key.
r Required with -R. Gives the new key name.
S Lists all security modules.
T Generates a new transport key.
t Required with -U and -W. Gives the name of
the transport key being managed.
U Unwraps the wrapped master key.
W Wraps the new master key.
x Forces the database to be read/write.
Syntax
43