DSKE CLI Reference

All DSKE commands are subcommands of qufabric dske. Run qufabric dske --help for full usage information.

Commands

qufabric dske status

Show DSKE status including registered security hubs and PSRD levels.

qufabric dske status

Output:

DSKE Status: Enabled
Local Peer UUID: 625e104c8321934fd6533994f8967b7c

Registered Security Hubs:
  Hub ID                            Client ID                         Generate    Recover     Status
  0a1b2c3d4e5f67890a1b2c3d4e5f6789  fedcba9876543210fedcba9876543210  524288      524288      Enabled
  1234567890abcdef1234567890abcdef  abcdef1234567890abcdef1234567890  1048576     1048576     Enabled

qufabric dske ingest-psrd <file>

Ingest a wrapped PSRD file to register with a security hub.

qufabric dske ingest-psrd /path/to/psrd-wrapped.json

Arguments:

Notes:

• Each file is single-use — it cannot be re-ingested
• Each client must receive a unique PSRD file
• This command registers the client with the hub and stores credentials locally

qufabric dske list-hubs

List all registered security hubs with their PSRD levels.

qufabric dske list-hubs

qufabric dske disable-hub <hub-id>

Temporarily disable a security hub. The hub is not notified — this only affects local behavior. DSKE will not use this hub for key generation or recovery until re-enabled.

qufabric dske disable-hub 0a1b2c3d4e5f67890a1b2c3d4e5f6789

Arguments:

qufabric dske enable-hub <hub-id>

Re-enable a previously disabled security hub.

qufabric dske enable-hub 0a1b2c3d4e5f67890a1b2c3d4e5f6789

qufabric dske remove-hub <hub-id>

Permanently remove a security hub registration. To re-register, you must ingest a new PSRD file for this hub.

qufabric dske remove-hub 0a1b2c3d4e5f67890a1b2c3d4e5f6789

Warning: This is destructive. The client's credentials for this hub are deleted. You will need a new PSRD file from the hub administrator to re-register.

qufabric dske refill-psrd <hub-id>

Request an online PSRD refill from a specific security hub.

qufabric dske refill-psrd 0a1b2c3d4e5f67890a1b2c3d4e5f6789

Notes:

• Requires the hub to support online refill
• Automatic refill is triggered when PSRD levels drop below the warning threshold
• Use this for manual top-up when needed

Quick Reference

Security Hub Commands

These commands run on the security hub peer using the local distributor tool:

qbt-local-distributor dske-client add <name>

Add a new DSKE client to the security hub.

sudo -u qbtld qbt-local-distributor dske-client add my-client-name --json

qbt-local-distributor dske-client list

List all registered DSKE clients.

sudo -u qbtld qbt-local-distributor dske-client list --json

qbt-local-distributor dske-client assign-psrd

Generate and assign PSRD to a client.

sudo -u qbtld qbt-local-distributor dske-client assign-psrd \
  --first \
  --user-bytes 524288 \
  --server-bytes 524288 \
  --user-id <dske-client-id> \
  -o /tmp/psrd-output

Flags: