step-kms-plugin is a plugin for step that allows performing cryptographic operations on Hardware Security Modules (HSMs), Cloud Key Management Services (KMSs) and devices like YubiKey that implement a Personal Identity Verification (PIV) interface. This command uses the term KMS to refer to any of these interfaces. step-kms-plugin can be used using 'step kms [command]', or as a standalone application. Common operations include: - Create asymmetric key pair on a KMS - Sign data using an existing KMS-stored key - Extract public keys and certificates stored in a KMS Usage: step-kms-plugin [command] Available Commands: attest create an attestation certificate certificate print, import, copy, or delete a certificate in a KMS completion Generate the autocompletion script for the specified shell create generates a key pair in the KMS decrypt decrypt the given input with an RSA key encrypt encrypt a given input with an RSA public key help Help about any command key print or delete a public key in a KMS search search for keys stored in a KMS and list their names or details sign sign the given digest using the kms version print the current version Flags: -h, --help help for step-kms-plugin --kms uri The uri with the kms configuration to use Use "step-kms-plugin [command] --help" for more information about a command.