Syntax
java -jar kmsclient.jar https://<host:encport> <did> <username> <password> GIK <manufacturer> <device-serial-number> <return-type> <public-key-token>
Values
|
Value |
Explanation |
|---|---|
|
host:encport |
The URL of the KA where the CCS web service operations will be submitted.
Example: https://kms.strongauth.com:8181 |
|
did |
Unique domain identifier that belongs to SAKA The URL of the KA where the CCS web service operations will be submitted. For example, the URL can be https://kms.strongkey.com. |
|
username |
The username in the encryption domain with authorization to call the web service. |
|
password |
The password of the username above. |
|
manufacturer |
The Manufacturer ID for the product that will be creating encrypted swipes. |
|
device-serial-number |
The DSN for the device. This must be either an 11- or 15-byte string of hex-encoded data. |
|
return-type |
Determines the manner in which an Initial Key is returned to the calling application. The only currently supported value is to return the Initial Key as KeyComponents. Future implementations will also support returning the Initial Key, encrypted under a previously escrowed public key on KA. |
|
public-key-token |
Specifies a token in KA that holds a previously escrowed public key which can be used to encrypt keys for export from the appliance. |
Output
$ example:~/topaz> java -jar kmsclient.jar https://saka.strongkey.com:8181 1 encryptdecrypt Abcd1234! GIK 4 987654321FE KeyComponents 1791567241086
NOTE: Picked up JDK_JAVA_OPTIONS: --add-opens java.base/java.util=ALL-UNNAMED --add-opens java.base/java.lang=ALL-UNNAMED --add-opens java.base/java.lang.reflect=ALL-UNNAMED --add-opens java.base/java.io=ALL-UNNAMED --add-opens java.management/javax.management.openmbean=ALL-UNNAMED --add-opens java.management/javax.management=ALL-UNNAMED --add-opens java.base/sun.security.provider=ALL-UNNAMED
Calling Generate Initial Key at https://saka.strongkey.com:8181...
KeyComponent 1 of 3 [KCV1]
262D2AC212362560CCB5303B56669408 [09EF21]
KeyComponent 2 of 3 [KCV2]
2E22991016119F287F2003BB03D09CBA [C2824B]
KeyComponent 3 of 3 [KCV3]
268F7883DBA3F5ED7261D3801274EEEA [9D7F09]
InitialKey Key Check Value [2ECD0A]