Customer keys

How to generate new customer key

./scripts/new-customer-key.sh

Example:

./scripts/new-customer-key.sh fw "ACME" "4.16"

Script automatically signs newly generated key. Firmware keys are signed with ABE1D0BC66278008 2022-01-12 3mdeb Dasharo Master Key and software keys are signed with 80693E028589B763 2021-06-23 3mdeb Open Source Software Master Key <contact@3mdeb.com>

How to generate new PC Engines release singing key

Example:

./scripts/new-customer-key.sh pce "PC Engines" "4.16"

How to extend key validity

By default, we generate keys with 1 year expire date. To extend key validity, you must own the private key, of course.

• Set a new expiry date to one year (starting from the current date):

gpg --quick-set-expire KEY_ID 1y

• Export public key and push it to repository:

gpg --armor --export KEY_ID > CUSTOMER_NAME/KEY_NAME