Signer

Name of the worker. Click the link to view the worker's page.

Old Key Alias

The name of the current key (if any).

This is stored in the configuration as the DEFAULTKEY property.

Key Algorithm

Name of the key algorithm to use for the new key.

By default, key algorithms can be selected from a drop-down list with the common options (RSA, DSA, ECDSA, and AES).

To manually specify another value, click >.

Examples: RSA, DSA, ECDSA, AES.

The value will be preselected with the value of the KEYALG property specified in the worker.

If generating a symmetric (secret) key and the specified key algorithm name is not present in the predefined list of known secret key algorithms, the key algorithm name must be specified with the prefix "SEC:", for example: SEC:Blowfish. Currently, the secret key list contains the algorithms AES and DES.

If the worker references the JackNJI11CryptoToken, the algorithm name can be specified as a long or hexadecimal constant value. For more information, see Secret Key generation in JackNJI11CryptoToken.

Key Specification

Parameters for the key generation process.

By default, the key specification can be selected from a drop-down list with common values, depending on the key algorithm selected.

To manually specify another value, click >.

Note that some key specifications presented might not be supported by the crypto token being used.

For RSA and DSA, this should be the key length and for ECDSA the name of the curve.

Examples: 2048, 3072, secp256r1.

The value is already set if the worker has a KEYSPEC property specified.

New Key Alias

The name for the new key to generate.

Generate

Performs the key generation for each selected worker.

The result of the key generation is written out in the Result column.

If all key generations was successful the page is automatically switched back to the previous otherwise the page remains and the user has the ability to try again.

Cancel

Returns to the previous page.