fioctl keys resign-root

Re-sign the Factory’s TUF root metadata


The root metadata, root.json expires. Re-signing bumps the expiriation date.

fioctl keys resign-root <offline key archive> [flags]


-m, --changelog string   Reason for resigning root.json. Saved in root metadata for tracking change history
    --dryrun             Just print what the new root.json will look like and exit
-f, --factory string     Factory to list targets for
-h, --help               help for resign-root
-t, --token string       API token from

Options inherited from parent commands

-c, --config string   config file (default is $HOME/.config/fioctl.yaml)
-v, --verbose         Print verbose logging


  • fioctl keys - Manage keys in use by your factory fleet