Syntax
java -jar kmsclient.jar https://<host:encport> <did> <username> <password> GAK <key-name> <BDK|LTMK|MAC|TMK|TPK|GPK|Other> <RSA> <1024|2048|4096|8192> <bankid> [terminalid] [terminaltype] [notes] <Hex|Base64>
Values
|
Value |
Explanation |
|
|---|---|---|
|
host:encport |
The URL of the KA where the CCS web service operations will be submitted.
Example: https://kms.strongauth.com:8181 |
|
|
did |
Unique domain identifier that belongs to SAKA The URL of the KA where the CCS web service operations will be submitted. For example, the URL can be https://kms.strongkey.com. |
|
|
username |
The username in the encryption domain with authorization to call the web service. |
|
|
password |
The password of the username above. |
|
|
key-name |
A string identifying multiple key components as belonging to the same set. The value can be any 64-character long string (without spaces and special characters). It is merely used to identify the key components during a “Load BDK” operation. |
|
|
BDK|LTMK|MAC|TMK|TPK|GPK|Other |
The type of key to be stored in the KA. |
|
|
RSA |
The cryptographic algorithm to be used in the operation. |
|
|
1024|2048|4096|8192 |
The key size to be used in the operation. |
|
|
bankid |
A numeric identifier for which bank the key is associated with. |
|
|
terminalid |
An optional numerical identifier for which terminal this ANSI key is associated with. |
|
|
terminaltype |
An optional string identifier for the type of terminal this ANSI key belongs to. |
|
|
terminaltype |
An optional string identifier for the type of terminal this ANSI key belongs to. |
|
|
notes |
Any extra information to be sent when storing a key. Can be NULL if the word “null” is specified. |
|
|
Hex|Base64 |
The encoding format to be used. |
Output
$ example:~/topaz> java -jar kmsclient.jar https://saka.strongkey.com:8181 1 encryptdecrypt Abcd1234! GAK myRSAKey LTMK RSA 4096 1 123 null myNotes Hex
NOTE: Picked up JDK_JAVA_OPTIONS: --add-opens java.base/java.util=ALL-UNNAMED --add-opens java.base/java.lang=ALL-UNNAMED --add-opens java.base/java.lang.reflect=ALL-UNNAMED --add-opens java.base/java.io=ALL-UNNAMED --add-opens java.management/javax.management.openmbean=ALL-UNNAMED --add-opens java.management/javax.management=ALL-UNNAMED --add-opens java.base/sun.security.provider=ALL-UNNAMED
Calling Store ANSI Key at https://saka.strongkey.com:8181...
{"KeyType":"LTMK","KeyFormat":"RSAPublicKey","KeySize":"4096","PublicKey":"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","PublicKeyEncoding":"Hex","Nonce":"YBbhoqA5b5IdnrJC4fx/n65KLmI=","SignedNonce":"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","SignedNonceEncoding":"Hex","SignatureDigest":"SHA256"}