PKCSCCA(1)

NAME
pkcscca - configuration utility for the CCA token

SYNOPSIS
pkcscca [-h] [-m v2objectsv3] [OPTIONS]

DESCRIPTION
The pkcscca utility assists in administering the CCA token. Currently it migrates opencryptoki version 2 private token objects to the encryption method used in opencryptoki version 3. In verion 2 of opencryptoki, CCA private token objects were encrypted in CCA hardware. In version 3 these objects are encrypted in software. The v2objectsv3 migration option migrates these version 2 objects by decrypting them in CCA hardware using a secure key and then re-encrypting them in software using a software key. Afterwards, v2 objects can be accessed in version 3.

FLAGS

-h  show usage information

-m  perform a migration. v2objectsv3 is currently the only type of migration supported and must be specified along with this flag.

MIGRATION OPTIONS

-d|--datastore directory
    the directory where the CCA token information is kept. This directory will be used to locate the private token objects to be migrated. i.e. /var/lib/opencryptoki/ccatok

-v|--verbose
    provide detailed output during migration

FILES

/var/lib/opencryptoki/ccatok/TOK_OBJ/OBJ.IDX
    contains current list of public and private token objects for the CCA token.

SEE ALSO
README.cca_stdll (in system's doc directory)