ickey(1M)																 ickey(1M)

NAME

       ickey - install a client key for WAN boot

SYNOPSIS

       /usr/lib/inet/wanboot/ickey [-d] [-o type=3des]

       /usr/lib/inet/wanboot/ickey [-d] [-o type=aes]

       /usr/lib/inet/wanboot/ickey [-d] [-o type=sha1]

       The ickey command is used to install WAN boot keys on a running UNIX system so that they can be used the next time the system is installed.
       You can store three different types of keys: 3DES and AES for encryption and an HMAC SHA-1 key for hashed verification.

       ickey reads the key from standard input using getpassphrase(3C) so that it does not appear on the command line. When installing keys  on  a
       remote system, you must take proper precautions to ensure that any keying materials are kept confidential. At a minimum, use ssh(1) to pre-
       vent interception of data in transit.

       Keys are expected to be presented as strings of hexadecimal digits; they can (but need not) be preceeded by a 0x or 0X.

       The ickey command has a single option, described below. An argument of the type -o type=keytype is required.

       The ickey command the following option.

       -d

	   Delete the key specified by the keytype argument.

       On success, ickey exits with status 0; if a problem occurs, a diagnostic message is printed and ickey exits with non-zero status.

       /dev/openprom

	   WAN boot key storage driver

       See attributes(5) for descriptions of the following attributes:

       +-----------------------------+-----------------------------+
       |      ATTRIBUTE TYPE	     |	    ATTRIBUTE VALUE	   |
       +-----------------------------+-----------------------------+
       |Availability		     |SUNWwbsup 		   |
       +-----------------------------+-----------------------------+
       |Interface Stability	     |Unstable			   |
       +-----------------------------+-----------------------------+

       ssh(1), openprom(7D), attributes(5)

								    7 May 2003								 ickey(1M)