table of contents
| PVVERIFY(1) | Pvverify Manual | PVVERIFY(1) |
NAME¶
pvverify - Tool to verify host-keys
SYNOPSIS¶
pvverify [OPTIONS] --host-key-document <FILE> <--no-verify|--cert <FILE>>
DESCRIPTION¶
Tool to verify host-keys. Use this tool to verify the chain of trust for IBM Secure
OPTIONS¶
-k, --host-key-document <FILE>
Can be specified multiple times and must be specified at least once.
--no-verify
Does not require the host-key documents to be valid. Do not use for a production request unless you verified the host-key document beforehand.
-C, --cert <FILE>
The certificates are used to establish a chain of trust for the verification of the host-key documents. Specify this option twice to specify the IBM Z signing key and the intermediate CA certificate (signed by the root CA).
--crl <FILE>
The list is used to check whether a certificate of the chain of trust is revoked. Specify this option multiple times to use multiple CRLs.
--offline
--root-ca <ROOT_CA>
If omitted, the system wide-root CAs installed on the system are used. Use this only if you trust the specified certificate.
--version
--hkd-version <VERSION>
Possible values:
- 2: Version 2 - uses hybrid (post-quantum) cryptographic keys.
-h, --help
| 2026-08-11 | s390-tools |