YUBIHSM-SHELL(1) YUBIHSM-SHELL(1) (NAME) yubihsm-shell - YubiHSM 2 (SYNOPSIS) yubihsm-shell []... (DESCRIPTION) -h, --help -V, --version -a, --action=ENUM ( ="benchmark", "blink-device", "create-otp-aead", "decrypt-aesccm", "decrypt-aescbc", "decrypt-aesecb", "decrypt-oaep", "decrypt-otp", "decrypt-pkcs1v15", "delete-object", "derive-ecdh", "encrypt-aesccm", "encrypt-aescbc", "encrypt-aesecb", "generate-asymmetric-key", "generate-csr", "generate-hmac-key", "generate-otp-aead-key", "generate-wrap-key", "generate-symmetric-key", "get-device-info", "get-logs", "get-object-info", "get-opaque", "get-option", "get-pseudo-random", "get-public-key", "get-storage-info", "get-template", "get-wrapped", "get-rsa-wrapped", "get-rsa-wrapped-key", "get-device-pubkey", "list-objects", "put-asymmetric-key", "put-authentication-key", "put-hmac-key", "put-opaque", "put-option", "put-otp-aead-key", "put-symmetric-key", "put-template", "put-wrap-key", "put-rsa-wrapkey", "put-public-wrapkey", "put-wrapped", "put-rsa-wrapped", "put-rsa-wrapped-key", "randomize-otp-aead", "reset", "set-log-index", "sign-attestation-certificate", "sign-ecdsa", "sign-eddsa", "sign-hmac", "sign-pkcs1v15", "sign-pss", "sign-ssh-certificate") -p, --password=STRING --authkey=SHORT (=`1') -i, --object-id=SHORT (=`0') -l, --label=STRING (=`') -d, --domains=STRING (=`1,2,3,4,5,6,7,8,9,10,11,12,13,14,15,16') -c, --capabilities=STRING (=`0') -t, --object-type=STRING (=`any') -y, --ykhsmauth-label=STRING YubiKey ( ykhsmauth ) -r, --ykhsmauth-reader=STRING YubiKey (=`') --delegated=STRING (=`0') --new-password=STRING -A, --algorithm=STRING (=`any') --oaep=STRING OAEP. (asymmetric wrap) (=`rsa-oaep-sha256') --mgf1=STRING MGF1. (asymmetric wrap) (=`mgf1-sha256') --nonce=INT (nonce) OTP --iv=STRING (IV) --count=INT (=`256') --duration=INT (=`10') --wrap-id=SHORT wrap --include-seed (seed) ED25519 wrap (=) --template-id=SHORT (template) --attestation-id=SHORT (attestation) --log-index=INT (log index) --opt-name=STRING --opt-value=STRING --with-compression X509Certificate (=) -S, --subject=STRING (subject) . : /CN=host.example.com/OU=test/O=example.com/ --in=STRING ( ) (=`-') --out=STRING ( ) (=`-') --informat=ENUM ( ="default", "base64", "binary", "PEM", "password", "hex", "ASCII" =`default') --outformat=ENUM ( ="default", "base64", "binary", "PEM", "hex", "ASCII" =`default') -f, --config-file=STRING (=`') -C, --connector=STRING (connectors) --cacert=STRING cacert HTTPS --cert=STRING HTTPS --key=STRING HTTPS --proxy=STRING () --noproxy=STRING -v, --verbose=INT (=`0') -P, --pre-connect (=) --device-pubkey=STRING yubihsm-shell 2.8.0 YUBIHSM-SHELL(1)