The ickey command is used to install WAN boot keys on a running UNIX system so that they can be used the next time the system is installed. You can store three different types of keys: 3DES and AES for encryption and an HMAC SHA-1 key for hashed verification.

ickey reads the key from standard input using getpassphrase(3C) so that it does not appear on the command line. When installing keys on a remote system, you must take proper precautions to ensure that any keying materials are kept confidential. At a minimum, use ssh(1) to prevent interception of data in transit.

Keys are expected to be presented as strings of hexadecimal digits; they can (but need not) be preceeded by a 0x or 0X.

The ickey command has a single option, described below. An argument of the type -o type=keytype is required.

The ickey command the following option.

-d

Delete the key specified by the keytype argument.

On success, ickey exits with status 0; if a problem occurs, a diagnostic message is printed and ickey exits with non-zero status.

/dev/openprom

WAN boot key storage driver

See attributes(5) for descriptions of the following attributes:

ssh(1), openprom(7D)attributes(5)