This tool generates a Certificate Signing Request (CSR) using a private key from a YubiKey device.
GenerateYKCSR [options]
--new-pk
,--replace-private-key
: Indicates whether to replace the existing private key in the slot. If specified or set to true, a new private key will be generated. (Default:false
)--slot
,--slot-number
: The slot number on the YubiKey device to be used for the key generation or retrieval. (Default: PivSlot Key Management hex value)--out
,--out-file
: The file path where the generated CSR will be written. If not provided, the CSR will be printed to the console.--text
: Print CSR to the console irrespective of the file output option. (Default:false
)--cn
,--common-name
: The Common Name (CN) attribute to be included in the CSR's Distinguished Name (DN).--c
,--country
,--region
: The Country or Region (C) attribute for the CSR's DN.--dc
,--domain-component
: The Domain Component (DC) attribute for the CSR's DN.--e
,--email
: The Email Address (E) attribute for the CSR's DN.--l
,--locality
,--city
: The Locality (L) attribute for the CSR's DN, typically represents the city or locality.--ou
,--organizational-unit
: The Organizational Unit (OU) attribute for the CSR's DN, typically represents the department within an organization.--o
,--organization
: The Organization (O) attribute for the CSR's DN.--st
,--state
,--province
: The State or Province (ST) attribute for the CSR's DN.--s-dns
,--san-dns
: [Multiple] DNS name to be added to the Subject Alternative Name (SAN) extension.--s-e
,--san-email
: [Multiple] Email address to be added to the SAN extension.--s-ip
,--san-ip
: [Multiple] IP address to be added to the SAN extension.--s-uri
,--san-uri
: [Multiple] URI to be added to the SAN extension.--s-upn
,--san-user-principal-name
: [Multiple] User Principal Name (UPN) to be added to the SAN extension.