NAME

       efikeygen - command line tool for generating keys to use for PE image signing

SYNOPSIS

       efikeygen <[--ca | -C] [--self-sign | -S] | [--signer=nickname]>
              [--token=token | -t token]
              [--nickname=nickname | -n nickname]
              [--common-name=common name | -c common name]
              [--url=url | -u url]
              [--serial=serial | -s serial]

DESCRIPTION

       efikeygen  is a command line tool for generating keys and certificates to be used with pesign.  These are
       standard X.509 certificates, and can  potentially  be  generated  with  any  certificate  creation  tool.
       efikeygen simply sets generates keys with sensible options set for a key to be used for PE image signing.

OPTIONS

       --ca   The certificate being generated is for a CA.

       --self-sign
              The generated certificate is to be self signed.

       --signer=nickname
              Nickname of certificate to be used to sign the generated certificate.

       --token=token
              Use the specified NSS token's certificate database.

       --nickname=nickname
              The nickname to use for the generated certificate.

       --common-name=common-name
              The  X.509  Common  Name  for  the  generated certificate.  This should be in rfc2253 syntax, i.e.
              "CN=John Doe,OU=editing,O=New York Times,L=New York,ST=NY,C=US"

       --url=url
              Informational url regarding objects signed with this key.

       --serial=serial number
              Serial number for use with this key.  A certificate is identified by its  signer  and  its  serial
              number,   so it's best not to ever re-use this value with the same signer.  By default, this value
              will be generated using /dev/urandom .  It is not recommended to use this option to override that.

SEE ALSO

       pesign(1)

AUTHORS

       Peter Jones

                                                 Mon Jan 07 2013                                    EFIKEYGEN(1)