The Taglio PIV Card Tool is a command line tool that works with Taglio PIV Cards such as the C2190 and C2192, as well as other PIV compatible devices. It manages the keys, pin, puk, and allows for the creation of certificates and csr files.
It can be download here: https://www.taglio.com/download/taglio-piv-tool-installer.zip
NOTE: The Taglio PIV Tool executable is installed into the application folder.
Usage:
taglio-piv-tool command [ command_opts ] [ command_args ]
Commands:
list-cert [-key-ref ref] [-output filename] [-reader readername]
list-certs [-reader readername]
list-cardid [-reader readername]
list-config [-reader readername]
list-readers
test-pin [-pin pin] [-reader readername] [-config configfilename]
test-admin [-admin adminkey] [-reader readername] [-config configfilename]
test-key [-key-ref ref] [-pin pin] [-reader readername] [-config configfilename]
change-pin [-pin pin] [-new-pin newpin] [-reader readername] [-config configfilename]
change-puk [-puk puk] [-new-puk newpuk] [-reader readername] [-config configfilename]
change-admin [-admin adminkey] [-new-admin newadminkey] [-reader readername] [-config configfilename]
unblock-pin [-puk puk] [-new-pin newpin] [-reader readername] [-config configfilename]
generate-key [-key-ref ref] [-key-alg alg] [-admin adminkey] [-pin pin] [-reader readername] [-config configfilename]
generate-cert [-key-ref ref] [-subject subject] [-admin adminkey] [-pin pin] [-reader readername] [-config configfilename]
generate-csr [-key-ref ref] [-subject subject] [-pin pin] [-output filename] [-reader readername] [-config configfilename]
generate-csr-onbehalfof [-key-ref ref] [-name Domain\User] [-cert enrollmentagentthumbnail] [-pin pin] [-output filename] [-reader readername] [-config configfilename]
load-cert [-key-ref ref] [-admin adminkey] [-input filename][-no-compression][-reader readername] [-config configfilename]
load-pfx [-key-ref ref] [-admin adminkey] [-input filename] [-input-password password] [-reader readername] [-config configfilename]
help
Notes:
If options are required, but not specified then application will prompt for them.
pin is always entered as ascii string (i.e -pin 77777777).
puk and admin are always entered as hex string (i.e -puk 3030303030303030).
If a config file is specified, then the application will check the config file for protected arguments such as keys, pins, puks, and passwords before prompting for them.
To use a specific reader use the -reader option. If -reader option not specified, then first reader found will be used.
To see a list of available readers use "list-readers".
0 Comments