ickey

- install a client key for WAN boot

Synopsis

/usr/lib/inet/wanboot/ickey [-d] [-o type=3des]

/usr/lib/inet/wanboot/ickey [-d] [-o type=aes]

/usr/lib/inet/wanboot/ickey [-d] [-o type=sha1]

Description

The ickey command is used to install WAN boot keys on a running UNIX system so that they can be used the next time the system is installed. You can store three different types of keys: 3DES and AES for encryption and an HMAC SHA-1 key for hashed verification.

ickey reads the key from standard input using getpass(3C) so that it does not appear on the command line. When installing keys on a remote system, you must take proper precautions to ensure that any keying materials are kept confidential. At a minimum, use ssh(1) to prevent interception of data in transit.

Keys are expected to be presented as strings of hexadecimal digits; they can (but need not) be preceded by a 0x or 0X.

The ickey command has a single option, described below. An argument of the type -o type=keytype is required.

Options

The ickey command the following option.

-d

Delete the key specified by the keytype argument.

Exit Status

On success, ickey exits with status 0; if a problem occurs, a diagnostic message is printed and ickey exits with non-zero status.

Files

/dev/openprom

WAN boot key storage driver

Attributes

See attributes(5) for descriptions of the following attributes:

See Also

ssh(1), openprom(7D), attributes(5)