Sign in

v1

latestOpenAPI 3.0.12026-07-177949123.5 KB
v1/cryptotoken

Generate keys

Generates a key pair given crypto token name, key pair alias, key algorithm and key specification, i.e. RSA 4096 or ECDSA secp256r1.

post/v1/cryptotoken/{cryptotoken_name}/generatekeys

Path parameters

cryptotoken_namestring required

Name of the token to generate keys for

Request body

key_pair_aliasstring

Key pair aliasof the key pair to be generated, must not already exist

key_algstring

Key algorithm, required for some algorithms, RSA, not required for others like EC or ML-DSA

key_specstring

Key specification, key size, curve or name, must be supported by the underlying crypto token, like 4096 for RSA or secp256r1 for EC

key_usagestring

Optional key usage, affects some crypto tokens (PKCS#11 NG) but not most others. Values SIGN, ENCRYPT, SIGN_ENCRYPT

Example request

{
  "key_pair_alias": "signKey",
  "key_alg": "RSA",
  "key_spec": "4096",
  "key_usage": "SIGN"
}

Response

Successful operation