Generating KSK and ZSK with RSA Algorithm | Utimaco Integration Guides

Run the following commands to generate a zone-signing key and a key-signing key using RSA algorithm:

›_ Console
`# p11tool2 slot=0 LoginUser=ask PubKeyAttr=CKA_LABEL=”ksk” PrvKeyAttr=CKA_LABEL=”ksk” GenerateKeyPair=RSA # p11tool2 slot=0 LoginUser=ask PubKeyAttr=CKA_LABEL=”zsk” PrvKeyAttr=CKA_LABEL=”zsk” GenerateKeyPair=RSA`

›_ Console

# p11tool2 slot=0 LoginUser=ask PubKeyAttr=CKA_LABEL=”ksk” PrvKeyAttr=CKA_LABEL=”ksk” GenerateKeyPair=RSA 

 

# p11tool2 slot=0 LoginUser=ask PubKeyAttr=CKA_LABEL=”zsk” 

PrvKeyAttr=CKA_LABEL=”zsk” GenerateKeyPair=RSA

Key generation output for KSK

Key generation output for ZSK

Each key should have unique label that will be used to refer the private key in next steps.

List the keys using p11tool2 command.

›_ Console
`# p11tool2 slot=0 LoginUser=ask ListObjects`

List key output

List key output