Commands / kosa8 key export
kosa8 key export
Write the active KEK to a file, to import on another machine
Usage
kosa8 export -o FILE
Writes the active KEK in hex to FILE (mode 0600). Whoever holds it can open every snapshot encrypted on this machine, so carry it the way the organization carries key material, import it, and wipe the file. A hardware provider, when available, makes this step unnecessary.
Options
| Flag | Type | What it does | Default |
|---|---|---|---|
-o, --output | string | file to write the key to (must not exist) | — |