23 lines
572 B
Plaintext
23 lines
572 B
Plaintext
|
|
|
|
Very brief instructions
|
|
|
|
To init card:
|
|
|
|
Erase card and create pkcs15 dir
|
|
./pkcs15-init -EC
|
|
|
|
Store a PIN on the card, using ID 01
|
|
./pkcs15-init -P --auth-id 01 --pin aaaa --puk bbbb --label "My PIN"
|
|
|
|
Generate a 512 bit RSA key and store on card, protected by the above PIN
|
|
./pkcs15-init -G rsa/512 --auth-id 01
|
|
|
|
Or, store a pkcs12 key/certificate pair
|
|
./pkcs15-init --auth-id 01 -f pkcs12 -S mycert.p12
|
|
|
|
Note that the pkcs12 file must use just one password - if you
|
|
use different passwords for integrity and confidentiality,
|
|
OpenSC will fail to import the keys.
|
|
|