.ie \n(.g .ds Aq \(aq
.el .ds Aq '
.TH oct-admin-generate 1  "oct-admin-generate " 
.SH NAME
oct\-admin\-generate \- Generate a Key on the card
.SH SYNOPSIS
\fBoct admin generate\fR <\fB\-o\fR|\fB\-\-output\fR> [\fB\-\-no\-dec\fR] [\fB\-\-no\-aut\fR] [\fB\-u\fR|\fB\-\-userid\fR] [\fB\-p\fR|\fB\-\-user\-pin\fR] [\fB\-h\fR|\fB\-\-help\fR] [\fIalgorithm\fR] 
.SH DESCRIPTION
Generate a Key on the card.
.PP
A signing key is always created, decryption and authentication keys are optional.
.SH OPTIONS
.TP
\fB\-o\fR, \fB\-\-output\fR=\fIoutput\fR
Output file
.TP
\fB\-\-no\-dec\fR
Do not create a key in the DEC slot
.TP
\fB\-\-no\-aut\fR
Do not create a key in the AUT slot
.TP
\fB\-u\fR, \fB\-\-userid\fR=\fIUser ID\fR
User ID to add to the exported certificate representation
.TP
\fB\-p\fR, \fB\-\-user\-pin\fR=\fIUser PIN file\fR
Optionally, get User PIN from a file
.TP
\fB\-h\fR, \fB\-\-help\fR
Print help (see a summary with \*(Aq\-h\*(Aq)
.TP
[\fIalgorithm\fR]
Choose the algorithm for the key material to generate on the card.

    If the parameter is not given, use the algorithm currently set on the card.

    Specific cards support a set of algorithms that can differ between models. On modern cards,
    use \*(Aqoct info\*(Aq to see the list of supported algorithms.
.br

.br
[\fIpossible values: \fRrsa2048, rsa3072, rsa4096, nistp256, nistp384, nistp521, cv25519]