WESTCOS-TOOL(1)

    .SH "NAME" westcos-tool - utility for manipulating data structures on westcos smart cards
    .SH "SYNOPSIS"
        .HP u
            westcos-tool
             [OPTIONS]

    .SH "DESCRIPTION"

        .PP The westcos-tool utility is used to manipulate the westcos data structures on 2 Ko smart cards / tokens. Users can create PINs, keys and certificates stored on the card / token. User PIN authentication is performed for those operations that require it.

    .SH "OPTIONS"

        .PP
                .PP --change-pin, -n

                        Changes a PIN stored on the card. User authentication is required for this operation.
                    .RE
                    .PP --certificate file, -t file

                            Write certificate file file in PEM format to the card. User authentication is required for this operation.
                        .RE
                        .PP --finalize, -f

                                Finalize the card. Once finalized the default key is invalidated, so PIN and PUK cannot be changed anymore without user authentication.

                                Warning, un-finalized cards are insecure because the PIN can be changed without user authentication (knowledge of default key is enough).
                            .RE
                            .PP --generate-key, -g

                                    Generate a private key on the card. The card must not have been finalized and a PIN must be installed (i.e. the file for the PIN must have been created, see option -i). By default the key length is 1536 bits. User authentication is required for this operation.
                                .RE
                                .PP --help, -h

                                        Print help message on screen.
                                    .RE
                                    .PP --install-pin, -i

                                            Install PIN file in on the card. You must provide a PIN value with -x.
                                        .RE
                                        .PP --key-length length, -l length

                                                Change the length of private key. Use with -g.
                                            .RE
                                            .PP --overwrite-key, -o

                                                    Overwrite the key if there is already a key on the card.
                                                .RE
                                                .PP --pin-value value, -x value

                                                        Set value of PIN. If set to env:VARIABLE, the value of the environment variable VARIABLE is used.
                                                    .RE
                                                    .PP --puk-value value, -y value

                                                            set value of PUK (or value of new PIN for change PIN command see -n). If set to env:VARIABLE, the value of the environment variable VARIABLE is used.
                                                        .RE
                                                        .PP --read-file filename, -j filename

                                                                Read the file filename from the card. The file is written on disk with name filename. User authentication is required for this operation.
                                                            .RE
                                                            .PP --reader arg, -r arg

                                                                        Number of the reader to use. By default, the first reader with a present card is used. If arg is an ATR, the reader with a matching card will be chosen.

                                                                .RE
                                                                .PP --unblock-pin, -u

                                                                        Unblocks a PIN stored on the card. Knowledge of the PIN Unblock Key (PUK) is required for this operation.
                                                                    .RE
                                                                    .PP --verbose -v

                                                                            Causes westcos-tool to be more verbose. Specify this flag several times to enable debug output in the OpenSC library.
                                                                        .RE
                                                                        .PP --wait, -w

                                                                                Wait for a card to be inserted.
                                                                            .RE
                                                                            .PP --write-file filename, -k filename

                                                                                    Put the file with name filename from disk to card. On the card the file is written in filename. User authentication is required for this operation.
                                                                                .RE

                                                                    .SH "AUTHORS"

                                                                        .PP westcos-tool was written by Francois Leblanc <francois.leblanc@cev-sa.com>.