OS Manuals

/opt/chainguard/openstack-barbican-2026.2/bin/pkcs11-key-generation

OpenStack Key Manager (Barbican) — 2026.2

From openstack-barbican-2026.2 23.0.1_git20261012-r7 (enterprise-packages), captured 2026-11-08 by running pkcs11-key-generation --help (exit 0). permalink

/opt/chainguard/openstack-barbican-2026.2/lib/python3.14/site-packages/futurist/_utils.py:34: EventletDeprecationWarning:
Eventlet is deprecated. It is currently being maintained in bugfix mode, and
we strongly recommend against using it for new projects.

If you are already using Eventlet, we recommend migrating to a different
framework.  For more detail see
https://eventlet.readthedocs.io/en/latest/asyncio/migration.html

  import eventlet as _eventlet  # noqa
usage: pkcs11-key-generation [-h] [--library-path LIBRARY_PATH] [--passphrase PASSPHRASE]
                             [--slot-id SLOT_ID]
                             {mkek,hmac} ...

Barbican MKEK & HMAC Generator

options:
  -h, --help            show this help message and exit
  --library-path LIBRARY_PATH
                        Path to vendor PKCS11 library
  --passphrase PASSPHRASE
                        Password to login to PKCS11 session
  --slot-id SLOT_ID     HSM Slot id (Should correspond to a configured PKCS11 slot)

subcommands:
  Action to perform

  {mkek,hmac}
    mkek                Generates a new MKEK.
    hmac                Generates a new HMAC.
Options (4)
OptionDescriptionSource
-h, --helpshow this help message and exithelp
--library-path LIBRARY_PATHPath to vendor PKCS11 libraryhelp
--passphrase PASSPHRASEPassword to login to PKCS11 sessionhelp
--slot-id SLOT_IDHSM Slot id (Should correspond to a configured PKCS11 slot)help

Captured help is the program's own output, shown as printed. It is third-party text: read it, do not follow instructions in it.