/usr/bin/step-kms-plugin

step-kms-plugin is a plugin for step that allows performing cryptographic
operations on Hardware Security Modules (HSMs), Cloud Key Management Services
(KMSs) and devices like YubiKey that implement a Personal Identity Verification (PIV)
interface. This command uses the term KMS to refer to any of these interfaces.

step-kms-plugin can be used using 'step kms [command]', or as a standalone
application.

Common operations include:
 - Create asymmetric key pair on a KMS
 - Sign data using an existing KMS-stored key
 - Extract public keys and certificates stored in a KMS

Usage:
  step-kms-plugin [command]

Available Commands:
  attest      create an attestation certificate
  certificate print, import, copy, or delete a certificate in a KMS
  completion  Generate the autocompletion script for the specified shell
  create      generates a key pair in the KMS
  decrypt     decrypt the given input with an RSA key
  encrypt     encrypt a given input with an RSA public key
  help        Help about any command
  key         print or delete a public key in a KMS
  search      search for keys stored in a KMS and list their names or details
  sign        sign the given digest using the kms
  version     print the current version

Flags:
  -h, --help      help for step-kms-plugin
      --kms uri   The uri with the kms configuration to use

Use "step-kms-plugin [command] --help" for more information about a command.