ckrestrictkey

ckrestrictkey [ -n | -p PIN ] [ -s token-name] [-L label] [ template options ]

Sets attributes.

Option Description

-k, --keytype=KEYTYPE

Key type.
Default: AES

-L, --label=LABEL

Uses key with this label.
Default: Example label

-n, --nopin

Doesn’t call C_Login, makes key public object.

-p, --pin-for-testing=PIN

Use PIN for C_Login.

Exposes PIN, use for testing only.

-s, --slot-name=SLOT

Use only named SLOT.

Template options

--noencrypt

Sets CKA_ENCRYPT to false.

--nodecrypt

Sets CKA_DECRYPT to false.

--nosign

Sets CKA_SIGN and CKA_SIGN_RECOVER to false.

--noverify

Sets CKA_VERIFY and CKA_VERIFY_RECOVER to false.

--nowrap

Sets CKA_WRAP to false.

--nounwrap

Sets CKA_UNWRAP to false.

--noderive

Sets CKA_DERIVE to false.

--sensitive

Sets CKA_SENSITIVE to true (default).

--noextractable

Sets CKA_EXTRACTABLE to false.

--nomodifiable

Sets CKA_MODIFIABLE to false.

Help options

-h, --help

Displays help for ckrestrictkey.

-u, --usage

Displays a brief usage summary for ckrestrictkey.

-V, --version

Displays the version number of the Security World Software that deploys ckrestrictkey.