$Id$


# ksmutil usage

## global options

	--config <config>          aka -c

## commands

	setup
	update

	zone add
		--zone <zone>                     aka -z
		[--policy <policy>]               aka -p
		[--signerconf <signerconf.xml>]   aka -s
		[--input <input>]                 aka -i
		[--output <output>]               aka -o

	zone delete
		--zone <zone> | --all             aka -z / -a

	zone list

	repository list

	policy export
		--policy <policy> | --all         aka -p / -a

	policy list

	key list
		[--verbose]
		--zone <zone> | --all             aka -z / -a
(will appear soon:
		[--keystate <state>]              aka -e
		[--keytype <type>]                aka -t
		[--ds]                            aka -d    )

	key export
		--zone <zone> | --all             aka -z
		[--keystate <state>]              aka -e
		[--keytype <type>]                aka -t
		[--ds]                            aka -d

	key import
		--cka_id <CKA_ID>                 aka -k
		--repository <repository>         aka -r
		--zone <zone>                     aka -z
		--bits <size>                     aka -b
		--algorithm <algorithm>           aka -g
		--keystate <state>                aka -e
		--keytype <type>                  aka -t
		--time <time>                     aka -w
		[--retire <retire>]               aka -y
		
	key rollover
		--zone zone [--keytype <type>]
	key rollover
		--policy policy [--keytype <type>]
	
	key purge --zone <zone>                   aka -z
	key purge --policy <policy>               aka -p

    key generate
        --policy <policy>                     aka -p
        --interval <interval>                 aka -n

	backup done --repository <repository>     aka -r
	backup list --repository <repository>     aka -r
	
	rollover list


key states: GENERATED|PUBLISHED|READY|ACTIVE|RETIRED|REVOKED|DEAD
key types:  KSK|ZSK