Product Documentation

    Syntax

    java -jar kmsclient.jar https://<host:encport> <did> <username> <password> RDK <retiringtoken> [parent-token] <key-name> <BDK|LTMK|MAC|TMK|TPK|GPK|Other> <AES|TDES> <128|192|256> <bankid> [terminalid] [terminaltype] [hex-symkey] <kcv> [notes]

    Values

    Value

    Explanation

    		  

    host:encport

    		 The URL of the KA where the CCS web service operations will be submitted.

    Example: https://kms.strongauth.com:8181

    		  

    did

    Unique domain identifier that belongs to SAKA The URL of the KA where the CCS web service operations will be submitted. For example, the URL can be https://kms.strongkey.com.

    		  

    username

    The username in the encryption domain with authorization to call the web service.

    		  

    password

    The password of the username above.

    		  

    reitiringtoken

    The generated token of the key to be replaced.

    		  

    parent-token

    The token in which the key encrypting key is stored. Can be NULL if the word "null" is specified.

    		  

    key-name

    A string identifying multiple key components as belonging to the same set. The value can be any 64-character long string (without spaces and special characters). It is merely used to identify the key components during a “Load BDK” operation..

    		  

    BDK|LTMK|MAC|TMK|TPK|GPK|Other

    The type of key to be stored in the KA.

    		  

    AES|TDES

    Either the AES or Triple DES algorithm.

    		  

    128|192|256

    Available key sizes accepted by the appliance.

    		  

    bankid

    A numeric identifier for which bank the key is associated with.

    		  

    terminalid

    An optional numerical identifier for which terminal this ANSI key is associated with.

    		  

    terminaltype

    An optional string identifier for the type of terminal this ANSI key belongs to.

    		  

    hex-symkey

    The encrypted key which is to be loaded in KA. Can be null if the word “null” is specified.

    		  

    kcv

    The Key Check Value of the key being loaded.

    		  

    notes

    Any extra information to be sent when storing a key. Can be NULL if the word “null” is specified.

    		  

    Output

    $ example:~/topaz> java -jar kmsclient.jar https://saka.strongkey.com:8181 1 encryptdecrypt Abcd1234! RDK 1000000000000005 null NewBDK BDK TDES 128 1 123 "Testing Terminal" null 4CC445 "Loading New BDK"
    NOTE: Picked up JDK_JAVA_OPTIONS: --add-opens java.base/java.util=ALL-UNNAMED --add-opens java.base/java.lang=ALL-UNNAMED --add-opens java.base/java.lang.reflect=ALL-UNNAMED --add-opens java.base/java.io=ALL-UNNAMED --add-opens java.management/javax.management.openmbean=ALL-UNNAMED --add-opens java.management/javax.management=ALL-UNNAMED --add-opens java.base/sun.security.provider=ALL-UNNAMED

    Calling Replace ANSI Key at https://saka.strongkey.com:8181...

    Token received: {"DID":"1","SRID":"1791384935263","Token":"1000000000000006","KeyName":"NewBDK"}