xca(1) [debian man page]

XCA(1)							      General Commands Manual							    XCA(1)

NAME

       xca - X Certificate and key management
       A GUI for handling X509 certificates, RSA/DSA/EC keys, PKCS#10 Requests and CRLs in Software and on Smartcards.

SYNOPSIS

       xca [-v] [-d] [-x]

DESCRIPTION

       This  application is intended as CA, certificate- and Key store. It uses a single file to store the items.  Supported are Certificate sign-
       ing requests (PKCS#10), Certificates (X509v3), RSA, DSA and EC keys and Certificate revokation lists.  The signing  of  requests,  and  the
       creation  of  selfsigned certificates is supported. Both can use templates for simplicity.  The PKI structures can be imported and exported
       in several formats like PKCS#12, PEM, DER, PKCS#8, PKCS#7.
       XCA enables users to manage smartcards via the PKCS#11 interface

OPTIONS

       A summary of options are included below.  There are some deprecated legacy options: [-k] [-r] [-c] [-p] [-7] [-l] [-t] [-P]
       Before XCA 0.9.0, the type of the items had to be given. This was removed since. Just put  all  keys,  certs,  requests	and  the  database
       unsorted on the commandline. For backwards compatibility those options are ignored when found.

       -v     Show version information and exit.

       -d     expect the following argument to be a new database to use.

       -x     Exit  after  processing all commandline options.	Usually after importing the items from commandline the application will startup as
	      usual. With the -x option given it will exit after finishing the import dialog. This is useful if xca is used as default application
	      for viewing certificates, keys or requests.

SEE ALSO

       A more detailed HTML documentation can be found in the doc directory, in the "Help" menu of the application or on http://xca.sf.net

AUTHOR

       This manual page was written by Christian Hohnstaedt <christian@hohnstaedt.de>

																	    XCA(1)

tpmtoken_import(1)					      General Commands Manual						tpmtoken_import(1)

							 TPM Management - tpmtoken_import

NAME

       tpmtoken_import - import an X.509 certficate and/or an RSA key pair into the user's TPM PKCS#11 data store

SYNOPSIS

       tpmtoken_import [ OPTION ] FILE

DESCRIPTION

       tpmtoken_import imports a PEM formatted representation of an X.509 certificate and/or an RSA key contained in FILE.

       Importing an X.509 certificate creates an X.509 Public Key Certificate PKCS#11 object and also an RSA Public Key PKCS#11 object using the
       RSA public key contained in the certificate.  The certificate's key must be an RSA key in order for the certificate to be successfully
       processed by this command.

       Importing an RSA key creates an RSA Public Key and an RSA Private Key PKCS#11 object.  In order to associate the RSA PKCS#11 objects with
       an X.509 Public Key Certificate PKCS#11 object, the RSA PKCS#11 objects must have a subject name and key identifier associated with them.
       This can be accomplished by supplying the corresponding X.509 certificate as an optional command parameter.

       The input can contain PEM formatted representations of both an X.509 certificate and an RSA key. If both representations are present then
       an X.509 Public Key Certificate PKCS#11 object, an RSA Public Key PKCS#11 object and an RSA Private Key PKCS#11 object are created.

       -h, --help
	      Display command usage info.

       -v, --version
	      Display command version info.

       -l, --log [none|error|info|debug]
	      Set logging level.

       -i, --idfile FILE
	      Use FILE as the PEM formatted X.509 certificate input used to obtain the subject and id attributes

       -k, --token STRING
	      Use STRING to identify the label of the PKCS#11 token to be used

       -n, --name STRING
	      Use STRING as the label for the imported object(s)

       -p, --public
	      Import the object(s) as a public object

       -t, --type key|cert
	      Import only the specified object type

       -y, --yes
	      Assume an answer of yes for any confirmation prompts that would normally be asked

SEE ALSO

       tpmtoken_init(1), tpmtoken_setpasswd(1), tpmtoken_objects(1), tpmtoken_protect(1)

REPORTING BUGS

       Report bugs to <trousers-users@lists.sourceforge.net>

TPM Management							    2005-04-25							tpmtoken_import(1)