Copyright (C) 2009 Internet Systems Consortium, Inc. ("ISC")
Permission to use, copy, modify, and/or distribute this software for any
purpose with or without fee is hereby granted, provided that the above
copyright notice and this permission notice appear in all copies.
THE SOFTWARE IS PROVIDED "AS IS" AND ISC DISCLAIMS ALL WARRANTIES WITH
REGARD TO THIS SOFTWARE INCLUDING ALL IMPLIED WARRANTIES OF MERCHANTABILITY
AND FITNESS. IN NO EVENT SHALL ISC BE LIABLE FOR ANY SPECIAL, DIRECT,
INDIRECT, OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES WHATSOEVER RESULTING FROM
LOSS OF USE, DATA OR PROFITS, WHETHER IN AN ACTION OF CONTRACT, NEGLIGENCE
OR OTHER TORTIOUS ACTION, ARISING OUT OF OR IN CONNECTION WITH THE USE OR
PERFORMANCE OF THIS SOFTWARE.
Id
Title: pkcs11-destroy
Author:
Generator: DocBook XSL Stylesheets v1.71.1 <http://docbook.sf.net/>
Date: Sep 18, 2009
Manual: BIND9
Source: BIND9
disable justification (adjust text to left margin only)
15 pkcs11-destroy [-m module] [-s slot] {-i ID | -l label} [-p PIN] [-w seconds]
pkcs11-destroy destroys keys stored in a PKCS#11 device, identified by their ID or label.
Matching keys are displayed before being destroyed. By default, there is a five second delay to allow the user to interrupt the process before the destruction takes place.
-m module
Specify the PKCS#11 provider module. This must be the full path to a shared library object implementing the PKCS#11 API for the device.
-s slot
Open the session with the given PKCS#11 slot. The default is slot 0.
-i ID
Destroy keys with the given object ID.
-l label
Destroy keys with the given label.
-p PIN
Specify the PIN for the device. If no PIN is provided on the command line, pkcs11-destroy will prompt for it.
-w seconds
Specify how long to pause before carrying out key destruction. The default is five seconds. If set to 0, destruction will be immediate.
pkcs11-list(3), pkcs11-keygen(3)
Internet Systems Consortium