Key Move

yubico-piv-tool -a move-key -s <slot> --to-slot <slot> -k

Description

Moves a key from one PIV slot to another. The function requires YubiKey 5.7 or higher.

Note
This actions moves only the key, not the certificate. So if the slot already stores a certificate, it might still look populated even if the key is no longer there.

Moving a key is an action that requires authentication, which is done by providing the management key. If no management key is provided, the tool will try to authenticate using the default management key.
[It is strongly recommended to change the Yubikey’s PIN, PUK and management key before start using it.]

Parameters

Parameter

Required

Optional

Description

Possible values

Default value

-s, --slot

X

What key slot to move the key from

9a, 9c, 9d, 9e, 82, 83, 84, 85, 86, 87, 88, 89, 8a, 8b, 8c, 8d, 8e, 8f, 90, 91, 92, 93, 94, 95, f9

--to-slot

X

What key slot to move the key to

9a, 9c, 9d, 9e, 82, 83, 84, 85, 86, 87, 88, 89, 8a, 8b, 8c, 8d, 8e, 8f, 90, 91, 92, 93, 94, 95, f9

-k, --key

X

Management key to use, if no value is specified key will be asked for

010203040506070801020304050607080102030405060708

Examples

yubico-piv-tool -a move-key -s 9c --to-slot 84 -k
Enter Password:
Enter management key:
Successfully moved key.