v1/cryptotoken

Generate keys

Generates a key pair given crypto token name, key pair alias, key algorithm and key specification, i.e. RSA 4096 or ECDSA secp256r1.

post/v1/cryptotoken/{cryptotoken_name}/generatekeys

Request

Base URL
/ejbca/ejbca-rest-api (relative, and the document was published on a file host, not at the API’s origin)
Auth
none declared
TypeScript
https://skmtc.dev/keyfactor/apis/ejbca-rest-interface/docs/v1/cryptotoken/:cryptotoken_name/generatekeys/post.ts
A function with typed inputs. Its response is checked against the schema.

cryptotoken_namestring required

Name of the token to generate keys for

key_pair_aliasstring

Key pair aliasof the key pair to be generated, must not already exist

key_algstring

Key algorithm, required for some algorithms, RSA, not required for others like EC or ML-DSA

key_specstring

Key specification, key size, curve or name, must be supported by the underlying crypto token, like 4096 for RSA or secp256r1 for EC

key_usagestring

Optional key usage, affects some crypto tokens (PKCS#11 NG) but not most others. Values SIGN, ENCRYPT, SIGN_ENCRYPT

{
  "key_pair_alias": "signKey",
  "key_alg": "RSA",
  "key_spec": "4096",
  "key_usage": "SIGN"
}

Successful operation