p2pe key generate
Command to generate a Based Derivation Key (BDK) or a Key Encryption Key (KEK) using the P2PE service. BDKs must remain on the P2PE service. KEKs can be exported from the P2PE service, see p2pe key export for more information.
On Windows operating systems execute the command from an Administrator Command Prompt. Right-click the Command Prompt and select Run as Administrator.
Linux
p2pe key generate [flags]
Windows
p2pe.exe key generate [flags]
| Flag | Description |
|---|---|
--keyUsage |
The type of key based on key usage. Options include BDK, KEK. |
--keyAlgo |
Key algorithm and key length. Options include 3DES, AES-128, AES-192, AES-256. |
[--kcvType] |
Key Check Value calculation method. Options include ZL6, CMAC. (Default ZL6) |
--help |
Help for the command. |
Linux Example
p2pe key generate --keyUsage BDK --keyAlgo 3DES --caCert tls.pem
Windows Example
p2pe.exe key generate --keyUsage BDK --keyAlgo 3DES --caCert tls.pem
