PKCS15-INITPKCS15-(1) OpenSC ToolsOpenSC Tools PKCS15-INITPKCS15-(1) (NAME) pkcs15-init - (SYNOPSIS) pkcs15-init [OPTIONS] (DESCRIPTION) pkcs15-init PKCS #15 . . pkcs15 . -p . PIN (PIN USAGE) pkcs15-init PKCS #15 PIN . (personalization) . OpenSC PIN (Security Officer) PIN . PIN (Personal Identification Number) RSA . PIN (ASCII) . (PIN pad reader) . PIN (SO) PKCS #15 . SO PIN . PIN ( OpenSC). PIN . PIN PUK ( PIN unblock PIN ) . PUK PIN . PKCS#15 ( PIN ) . (card binding) . --verify-pin . (MODES OF OPERATION) (Initialization) . PKCS #15 : pkcs15-init --create-pkcs15 PIN PUK . return SO PIN PIN . PKCS#15 : pkcs15-init --erase-card PIN (User PIN Installation) PIN . : pkcs15-init --store-pin --id " nn nn PKCS #15 . 01 02 . PIN PUK . PIN PUK return . (label) PIN ( ) --label . (Key generation) pkcs15-init . : pkcs15-init --generate-key "keyspec" --auth-id "nn" keyspec . rsa:2048 RSA 3072 . EC ec:prime256v1. : Edwards 25519 Ed25519 () ed25519 edwards25519 448 : Ed448 . Montgomery 25519 : X25519 () cv25519 curve25519 448 : X448 . AES:32 DES3:24. nn PIN 01. pkcs15-init PKCS #15 . (Private Key Upload) . okir.pem PEM : pkcs15-init --store-private-key okir.pem --id 45 --auth-id 01 pkcs15-init PKCS #15 . --id pkcs15-init . ( SHA1(modulus) RSA ). <<>> ( / ) . PEM pkcs15-init DER PKCS #12 . Netscape Navigator . PKCS #12 X.509 . pkcs15-init ..SS " (Public Key Upload)" --store-public-key . . --format pkcs15-init PEM . DER . . (Certificate Upload) --store-certificate . X.509 PEM . PKCS #12 (Uploading PKCS #12 bags) PKCS #12 . pkcs15-init . : pkcs15-init --store-private-key okir.p12 --format pkcs12 --auth-id 01 okir.p12 PIN 01 . X.509 CA . (Secret Key Upload) . AES : pkcs15-init --store-secret-key /dev/urandom --secret-key-algorithm aes:256 --auth-id 01 . --id . (OPTIONS) --version, OpenSC . --card-profile name, -c name pkcs15-init . . --create-pkcs15, -C pkcs15-init PKCS #15 PIN . --serial SERIAL . --erase-card, -E PKCS #15 . pkcs15-init . --erase-application AID AID . --generate-key keyspec, -G keyspec . keyspec <<:>> <> <<->> . id (intrinsic ID) . 'pkcs15-id-style' 'pkcs15.profile' . PKCS#15 AID aid . --pin pin, --puk puk, --so-pin sopin, --so-puk sopuk PIN/PUK . env:VARIABLE . . ps(1) . . --no-so-pin, SO PIN . --profile name, -p name pkcs15-init . pkcs15 . . OpenSC openpin PIN . PIN SO PIN PIN . + pkcs15+onepin. --secret-key-algorithm keyspec, keyspec aes:256. AES . --store-certificate filename, -X filename pkcs15-init filename --id . . 'pkcs15-id-style' 'pkcs15.profile' . PEM . AID aid . --store-pin, -P PIN/PUK . --store-public-key filename pkcs15-init --id . PEM . --format . --store-private-key filename, -S filename pkcs15-init . . PEM . --format . --id . 'pkcs15-id-style' 'pkcs15.profile' . PKCS#15 AID aid . --store-secret-key filename, pkcs15-init . . --secret-key-algorithm . --id . PKCS#15 AID aid . --store-data filename, -W filename . --update-certificate filename, -U filename pkcs15-init --id filename . PEM . ! --delete-objects arg, -D arg pkcs15-init . arg privkey pubkey secrkey cert chain data . data ---application-id --id . chain CA . --change-attributes arg, -A arg pkcs15-init . arg privkey pubkey secrkey cert data . --id . --label : pkcs15-init -A cert --id 45 -a 1 --label Jim --use-default-transport-keys, -T pkcs15-init (transport keys) . --sanity-check pkcs15-init (sanity check) . --reader arg, -r arg . . arg ATR . --verbose, -v pkcs15-init . OpenSC . --wait, -w pkcs15-init . --use-pinpad PIN pinpad . --auth-id filename, -a filename (ID) PIN / --puk-id ID (ID) PUK / --label LABEL (label) PIN . . --puk-label LABEL PUK --public-key-label LABEL ( --generate-key ) --cert-label LABEL ( --store-private-key ) --application-name arg ( --store-data-object ) --aid AID AID PKCS#15 ( ) --output-file filename -o filename, --passphrase PASSPHRASE (passphrase) --authority CA --key-usage arg -u arg, X.509 . arg digitalSignature nonRepudiation keyEncipherment dataEncipherment keyAgreement keyCertSign cRLSign . ( dataEnc). sign digitalSignature,keyCertSign,cRLSign decrypt keyEncipherment,dataEncipherment --finalize -F, --update-last-update 'lastUpdate' tokenInfo --ignore-ca-certificates PKCS#12 CA --update-existing --extractable --user-consent arg (user-consent) . arg . > 0 . . --insecure : PIN --md-container-guid GUID GUID MD --help -h, pkcs15-profile(5) (AUTHORS) pkcs15-init Olaf Kirch . openscopensc 06/02/2026 PKCS15-INITPKCS15-(1)