.\" DO NOT MODIFY THIS FILE!  It was generated by help2man 1.49.3.
.TH YUBIHSM-AUTH "1" "July 2026" "yubihsm-auth 2.8.0" "User Commands"
.SH NAME
yubihsm-auth \- manual page for yubihsm-auth 2.8.0
.SH SYNOPSIS
.B yubihsm-auth
[\fI\,OPTION\/\fR]...
.SH DESCRIPTION
.TP
\fB\-h\fR, \fB\-\-help\fR
Print help and exit
.TP
\fB\-V\fR, \fB\-\-version\fR
Print version and exit
.TP
\fB\-a\fR, \fB\-\-action\fR=\fI\,ENUM\/\fR
Action to perform  (possible
values="calculate", "change\-mgmkey",
"delete", "list", "put", "reset",
"retries", "version", "get\-challenge",
"get\-pubkey")
.TP
\fB\-k\fR, \fB\-\-mgmkey\fR=\fI\,STRING\/\fR
Management key is required to put and delete
credentials. Sometimes, this key is also
referenced as 'Admin Access Code'
(default=`00000000000000000000000000000000')
.TP
\fB\-K\fR, \fB\-\-new\-mgmkey\fR=\fI\,STRING\/\fR
New management key  (default=`')
.TP
\fB\-p\fR, \fB\-\-credpwd\fR=\fI\,STRING\/\fR
Credential password is used to access the
credential when logging into the YubiHSM2.
Sometimes, this password is also referenced
as 'User Access Code'  (default=`')
.TP
\fB\-l\fR, \fB\-\-label\fR=\fI\,STRING\/\fR
Credential label  (default=`')
.TP
\fB\-r\fR, \fB\-\-reader\fR=\fI\,STRING\/\fR
Only use a matching reader  (default=`')
.TP
\fB\-t\fR, \fB\-\-touch\fR=\fI\,ENUM\/\fR
Touch required  (possible values="off",
"on" default=`off')
.TP
\fB\-c\fR, \fB\-\-context\fR=\fI\,STRING\/\fR
Session keys calculation context  (default=`')
.TP
\fB\-v\fR, \fB\-\-verbose\fR[=\fI\,INT\/\fR]
Print more information  (default=`0')
.IP
Mode: derivation
.IP
Derive keys from a password using PBKDF2
\fB\-d\fR, \fB\-\-derivation\-password\fR=\fI\,STRING\/\fR
.TP
Derivation password for encryption and MAC keys
(default=`')
.IP
Mode: explicit
.IP
Explicit encryption and MAC keys
\fB\-e\fR, \fB\-\-enckey\fR=\fI\,STRING\/\fR           Encryption key  (default=`')
\fB\-m\fR, \fB\-\-mackey\fR=\fI\,STRING\/\fR           MAC key  (default=`')
.IP
Mode: asymmetric
.IP
Explicit ec\-p256 private key
\fB\-s\fR, \fB\-\-privkey\fR=\fI\,STRING\/\fR          Private key  (default=`')