NAME¶

ykman - YubiKey Manager (ykman)

SYNOPSIS¶

ykman [OPTIONS] COMMAND [ARGS]...

DESCRIPTION¶

Configure your YubiKey via the command line.

OPTIONS¶

-d, --device SERIAL

specify which YubiKey to interact with by serial number

-r, --reader NAME

specify a YubiKey by smart card reader name (can't be used with --device or list)

-t, --scp-ca FILENAME

specify the CA to use to verify the SCP11 card key (CA-KLCC)

-s, --scp CRED

specify private key and certificate chain for secure messaging, can be used multiple times to provide key and certificates in multiple files (private key, certificates in leaf-last order), OR SCP03 keys in hex separated by colon (:) K-ENC:K-MAC[:K-DEK]

-p, --scp-password PASSWORD

specify a password required to access the

--scp file, if needed

-l, --log-level [ERROR|WARNING|INFO|DEBUG|TRAFFIC]

enable logging at given verbosity level

--log-file FILE

write log to FILE instead of printing to stderr (requires --log-level)

--diagnose

show diagnostics information useful for troubleshooting

-v, --version

show version information about the app

--full-help

show --help output, including hidden commands

-h, --help

show this message and exit

EXAMPLES¶

List connected YubiKeys, only output serial number:

$ ykman list --serials

Show information about YubiKey with serial number 123456:

$ ykman --device 123456 info