zkey generate

Edit online

Use the generate command to generate a secure AES key on a key-management system.

Figure 1. zkey generate syntax 

1  zkey
generate
1 -T<EKMF_label-tags>
1 -B+ : <KMIP_label>
2? --local
where:
-T or --label-tags <label-tags>
EKMF Web only. Specifies the label tags for generating a secure key in EKMF Web, in the form <tag>=<value>(,<tag>=<value>)*[,] with tags as defined by the key template. Use the zkey kms info command to find out which label tags the configured key template uses.
−B or −−label <labels]>
KMIP only. Specifies an optional human-readable identifier of the key or keys stored in the Name KMIP attribute of the key. KMIP names must usually be unique within the KMIP server. For XTS type keys, two different labels must be specified, separated by a colon.
--local
Generates keys in the local secure key repository. These keys cannot be used in a key-management system.

For a complete list of options for the zkey generate command, see the zkey man page.