NAME

       ykman - YubiKey Manager (ykman)

SYNOPSIS

       ykman [OPTIONS] COMMAND [ARGS]...

DESCRIPTION

       Configure your YubiKey via the command line.

OPTIONS

       -d, --device SERIAL
              specify which YubiKey to interact with by serial number

       -r, --reader NAME
              specify a YubiKey by smart card reader name (can't be used with --device or list)

       -t, --scp-ca FILENAME
              specify the CA to use to verify the SCP11 card key (CA-KLCC)

       -s, --scp CRED
              specify  private  key  and  certificate  chain for secure messaging, can be used multiple times to
              provide key and certificates in multiple files (private key, certificates in leaf-last order),  OR
              SCP03 keys in hex separated by colon (:) K-ENC:K-MAC[:K-DEK]

       -p, --scp-password PASSWORD
              specify a password required to access the --scp file, if needed

       -l, --log-level [ERROR|WARNING|INFO|DEBUG|TRAFFIC]
              enable logging at given verbosity level

       --log-file FILE
              write log to FILE instead of printing to stderr (requires --log-level)

       --diagnose
              show diagnostics information useful for troubleshooting

       -v, --version
              show version information about the app

       --full-help
              show --help output, including hidden commands

       -h, --help
              show this message and exit

   Commands:
       info   show general information

       list   list connected YubiKeys

       script run a python script

       config configure the YubiKey, enable or disable applications

       fido   manage the FIDO applications

       hsmauth
              manage the YubiHSM Auth application

       oath   manage the OATH application

       openpgp
              manage the OpenPGP application

       otp    manage the YubiOTP application

       piv    manage the PIV application

EXAMPLES

       List connected YubiKeys, only output serial number:

       $ ykman list --serials

       Show information about YubiKey with serial number 123456:

       $ ykman --device 123456 info

SHELL COMPLETION

       Experimental  shell  completion  for  the command line tool is available.  To enable it, run this command
       once (for Bash):

       $ source <(_YKMAN_COMPLETE=bash_source ykman | sudo tee /etc/bash_completion.d/ykman)

       More information on  shell  completion  (including  instructions  for  other  shells)  is  available  at:
       https://click.palletsprojects.com/en/stable/shell-completion/

ykman 5.7.2                                         June 2025                                           YKMAN(1)