Deployed fe56591d to dev with MkDocs 1.6.1 and mike 2.1.3

dev/404.html

@@ -1304,6 +1304,8 @@
         
       
         
+      
+        
       
         
       
@@ -1493,6 +1495,34 @@
   
   
   
+    <li class="md-nav__item">
+      <a href="/infix/dev/keystore/" class="md-nav__link">
+        
+  
+  
+  <span class="md-ellipsis">
+    
+  
+    Keystore
+  
+
+    
+  </span>
+  
+  
+
+      </a>
+    </li>
+  
+
+              
+            
+              
+                
+  
+  
+  
+  
     <li class="md-nav__item">
       <a href="/infix/dev/syslog/" class="md-nav__link">
         

dev/boot/index.html

@@ -1325,6 +1325,8 @@
         
       
         
+      
+        
       
         
       
@@ -1800,6 +1802,34 @@
   
   
   
+    <li class="md-nav__item">
+      <a href="../keystore/" class="md-nav__link">
+        
+  
+  
+  <span class="md-ellipsis">
+    
+  
+    Keystore
+  
+
+    
+  </span>
+  
+  
+
+      </a>
+    </li>
+  
+
+              
+            
+              
+                
+  
+  
+  
+  
     <li class="md-nav__item">
       <a href="../syslog/" class="md-nav__link">
         

dev/branding/index.html

@@ -1323,6 +1323,8 @@
         
       
         
+      
+        
       
         
       
@@ -1512,6 +1514,34 @@
   
   
   
+    <li class="md-nav__item">
+      <a href="../keystore/" class="md-nav__link">
+        
+  
+  
+  <span class="md-ellipsis">
+    
+  
+    Keystore
+  
+
+    
+  </span>
+  
+  
+
+      </a>
+    </li>
+  
+
+              
+            
+              
+                
+  
+  
+  
+  
     <li class="md-nav__item">
       <a href="../syslog/" class="md-nav__link">
         

dev/bridging/index.html

@@ -1433,6 +1433,8 @@
         
       
         
+      
+        
       
         
       
@@ -1622,6 +1624,34 @@
   
   
   
+    <li class="md-nav__item">
+      <a href="../keystore/" class="md-nav__link">
+        
+  
+  
+  <span class="md-ellipsis">
+    
+  
+    Keystore
+  
+
+    
+  </span>
+  
+  
+
+      </a>
+    </li>
+  
+
+              
+            
+              
+                
+  
+  
+  
+  
     <li class="md-nav__item">
       <a href="../syslog/" class="md-nav__link">
         

dev/cli/configure/index.html

@@ -1449,6 +1449,8 @@
         
       
         
+      
+        
       
         
       
@@ -1638,6 +1640,34 @@
   
   
   
+    <li class="md-nav__item">
+      <a href="../../keystore/" class="md-nav__link">
+        
+  
+  
+  <span class="md-ellipsis">
+    
+  
+    Keystore
+  
+
+    
+  </span>
+  
+  
+
+      </a>
+    </li>
+  
+
+              
+            
+              
+                
+  
+  
+  
+  
     <li class="md-nav__item">
       <a href="../../syslog/" class="md-nav__link">
         

dev/cli/introduction/index.html

@@ -1394,6 +1394,8 @@
         
       
         
+      
+        
       
         
       
@@ -1583,6 +1585,34 @@
   
   
   
+    <li class="md-nav__item">
+      <a href="../../keystore/" class="md-nav__link">
+        
+  
+  
+  <span class="md-ellipsis">
+    
+  
+    Keystore
+  
+
+    
+  </span>
+  
+  
+
+      </a>
+    </li>
+  
+
+              
+            
+              
+                
+  
+  
+  
+  
     <li class="md-nav__item">
       <a href="../../syslog/" class="md-nav__link">
         

dev/cli/keybindings/index.html

@@ -1394,6 +1394,8 @@
         
       
         
+      
+        
       
         
       
@@ -1583,6 +1585,34 @@
   
   
   
+    <li class="md-nav__item">
+      <a href="../../keystore/" class="md-nav__link">
+        
+  
+  
+  <span class="md-ellipsis">
+    
+  
+    Keystore
+  
+
+    
+  </span>
+  
+  
+
+      </a>
+    </li>
+  
+
+              
+            
+              
+                
+  
+  
+  
+  
     <li class="md-nav__item">
       <a href="../../syslog/" class="md-nav__link">
         

dev/cli/netcalc/index.html

@@ -1394,6 +1394,8 @@
         
       
         
+      
+        
       
         
       
@@ -1583,6 +1585,34 @@
   
   
   
+    <li class="md-nav__item">
+      <a href="../../keystore/" class="md-nav__link">
+        
+  
+  
+  <span class="md-ellipsis">
+    
+  
+    Keystore
+  
+
+    
+  </span>
+  
+  
+
+      </a>
+    </li>
+  
+
+              
+            
+              
+                
+  
+  
+  
+  
     <li class="md-nav__item">
       <a href="../../syslog/" class="md-nav__link">
         

dev/cli/quick/index.html

@@ -1335,6 +1335,8 @@
         
       
         
+      
+        
       
         
       
@@ -1524,6 +1526,34 @@
   
   
   
+    <li class="md-nav__item">
+      <a href="../../keystore/" class="md-nav__link">
+        
+  
+  
+  <span class="md-ellipsis">
+    
+  
+    Keystore
+  
+
+    
+  </span>
+  
+  
+
+      </a>
+    </li>
+  
+
+              
+            
+              
+                
+  
+  
+  
+  
     <li class="md-nav__item">
       <a href="../../syslog/" class="md-nav__link">
         

dev/cli/tcpdump/index.html

@@ -1394,6 +1394,8 @@
         
       
         
+      
+        
       
         
       
@@ -1583,6 +1585,34 @@
   
   
   
+    <li class="md-nav__item">
+      <a href="../../keystore/" class="md-nav__link">
+        
+  
+  
+  <span class="md-ellipsis">
+    
+  
+    Keystore
+  
+
+    
+  </span>
+  
+  
+
+      </a>
+    </li>
+  
+
+              
+            
+              
+                
+  
+  
+  
+  
     <li class="md-nav__item">
       <a href="../../syslog/" class="md-nav__link">
         

dev/cli/text-editor/index.html

@@ -1422,6 +1422,8 @@
         
       
         
+      
+        
       
         
       
@@ -1611,6 +1613,34 @@
   
   
   
+    <li class="md-nav__item">
+      <a href="../../keystore/" class="md-nav__link">
+        
+  
+  
+  <span class="md-ellipsis">
+    
+  
+    Keystore
+  
+
+    
+  </span>
+  
+  
+
+      </a>
+    </li>
+  
+
+              
+            
+              
+                
+  
+  
+  
+  
     <li class="md-nav__item">
       <a href="../../syslog/" class="md-nav__link">
         

dev/cli/upgrade/index.html

@@ -1335,6 +1335,8 @@
         
       
         
+      
+        
       
         
       
@@ -1524,6 +1526,34 @@
   
   
   
+    <li class="md-nav__item">
+      <a href="../../keystore/" class="md-nav__link">
+        
+  
+  
+  <span class="md-ellipsis">
+    
+  
+    Keystore
+  
+
+    
+  </span>
+  
+  
+
+      </a>
+    </li>
+  
+
+              
+            
+              
+                
+  
+  
+  
+  
     <li class="md-nav__item">
       <a href="../../syslog/" class="md-nav__link">
         

dev/container/index.html

@@ -1804,6 +1804,8 @@
         
       
         
+      
+        
       
         
       
@@ -1993,6 +1995,34 @@
   
   
   
+    <li class="md-nav__item">
+      <a href="../keystore/" class="md-nav__link">
+        
+  
+  
+  <span class="md-ellipsis">
+    
+  
+    Keystore
+  
+
+    
+  </span>
+  
+  
+
+      </a>
+    </li>
+  
+
+              
+            
+              
+                
+  
+  
+  
+  
     <li class="md-nav__item">
       <a href="../syslog/" class="md-nav__link">
         

dev/developers-guide/index.html

@@ -1323,6 +1323,8 @@
         
       
         
+      
+        
       
         
       
@@ -1512,6 +1514,34 @@
   
   
   
+    <li class="md-nav__item">
+      <a href="../keystore/" class="md-nav__link">
+        
+  
+  
+  <span class="md-ellipsis">
+    
+  
+    Keystore
+  
+
+    
+  </span>
+  
+  
+
+      </a>
+    </li>
+  
+
+              
+            
+              
+                
+  
+  
+  
+  
     <li class="md-nav__item">
       <a href="../syslog/" class="md-nav__link">
         

dev/dhcp/index.html

@@ -1427,6 +1427,8 @@
         
       
         
+      
+        
       
         
       
@@ -1616,6 +1618,34 @@
   
   
   
+    <li class="md-nav__item">
+      <a href="../keystore/" class="md-nav__link">
+        
+  
+  
+  <span class="md-ellipsis">
+    
+  
+    Keystore
+  
+
+    
+  </span>
+  
+  
+
+      </a>
+    </li>
+  
+
+              
+            
+              
+                
+  
+  
+  
+  
     <li class="md-nav__item">
       <a href="../syslog/" class="md-nav__link">
         

dev/discovery/index.html

@@ -1472,6 +1472,8 @@
         
       
         
+      
+        
       
         
       
@@ -1661,6 +1663,34 @@
   
   
   
+    <li class="md-nav__item">
+      <a href="../keystore/" class="md-nav__link">
+        
+  
+  
+  <span class="md-ellipsis">
+    
+  
+    Keystore
+  
+
+    
+  </span>
+  
+  
+
+      </a>
+    </li>
+  
+
+              
+            
+              
+                
+  
+  
+  
+  
     <li class="md-nav__item">
       <a href="../syslog/" class="md-nav__link">
         

dev/eth-counters/index.html

@@ -1335,6 +1335,8 @@
         
       
         
+      
+        
       
         
       
@@ -1524,6 +1526,34 @@
   
   
   
+    <li class="md-nav__item">
+      <a href="../keystore/" class="md-nav__link">
+        
+  
+  
+  <span class="md-ellipsis">
+    
+  
+    Keystore
+  
+
+    
+  </span>
+  
+  
+
+      </a>
+    </li>
+  
+
+              
+            
+              
+                
+  
+  
+  
+  
     <li class="md-nav__item">
       <a href="../syslog/" class="md-nav__link">
         

dev/ethernet/index.html

@@ -1444,6 +1444,8 @@
         
       
         
+      
+        
       
         
       
@@ -1633,6 +1635,34 @@
   
   
   
+    <li class="md-nav__item">
+      <a href="../keystore/" class="md-nav__link">
+        
+  
+  
+  <span class="md-ellipsis">
+    
+  
+    Keystore
+  
+
+    
+  </span>
+  
+  
+
+      </a>
+    </li>
+  
+
+              
+            
+              
+                
+  
+  
+  
+  
     <li class="md-nav__item">
       <a href="../syslog/" class="md-nav__link">
         

dev/firewall/index.html

@@ -1655,6 +1655,8 @@
         
       
         
+      
+        
       
         
       
@@ -1844,6 +1846,34 @@
   
   
   
+    <li class="md-nav__item">
+      <a href="../keystore/" class="md-nav__link">
+        
+  
+  
+  <span class="md-ellipsis">
+    
+  
+    Keystore
+  
+
+    
+  </span>
+  
+  
+
+      </a>
+    </li>
+  
+
+              
+            
+              
+                
+  
+  
+  
+  
     <li class="md-nav__item">
       <a href="../syslog/" class="md-nav__link">
         

dev/hardware/index.html

@@ -1325,6 +1325,8 @@
         
       
         
+      
+        
       
         
       
@@ -1611,6 +1613,34 @@
   
   
   
+    <li class="md-nav__item">
+      <a href="../keystore/" class="md-nav__link">
+        
+  
+  
+  <span class="md-ellipsis">
+    
+  
+    Keystore
+  
+
+    
+  </span>
+  
+  
+
+      </a>
+    </li>
+  
+
+              
+            
+              
+                
+  
+  
+  
+  
     <li class="md-nav__item">
       <a href="../syslog/" class="md-nav__link">
         

dev/iface/index.html

@@ -1466,6 +1466,8 @@
         
       
         
+      
+        
       
         
       
@@ -1655,6 +1657,34 @@
   
   
   
+    <li class="md-nav__item">
+      <a href="../keystore/" class="md-nav__link">
+        
+  
+  
+  <span class="md-ellipsis">
+    
+  
+    Keystore
+  
+
+    
+  </span>
+  
+  
+
+      </a>
+    </li>
+  
+
+              
+            
+              
+                
+  
+  
+  
+  
     <li class="md-nav__item">
       <a href="../syslog/" class="md-nav__link">
         

dev/index.html

@@ -1401,6 +1401,8 @@
         
       
         
+      
+        
       
         
       
@@ -1590,6 +1592,34 @@
   
   
   
+    <li class="md-nav__item">
+      <a href="keystore/" class="md-nav__link">
+        
+  
+  
+  <span class="md-ellipsis">
+    
+  
+    Keystore
+  
+
+    
+  </span>
+  
+  
+
+      </a>
+    </li>
+  
+
+              
+            
+              
+                
+  
+  
+  
+  
     <li class="md-nav__item">
       <a href="syslog/" class="md-nav__link">
         

dev/ip/index.html

@@ -1510,6 +1510,8 @@
         
       
         
+      
+        
       
         
       
@@ -1699,6 +1701,34 @@
   
   
   
+    <li class="md-nav__item">
+      <a href="../keystore/" class="md-nav__link">
+        
+  
+  
+  <span class="md-ellipsis">
+    
+  
+    Keystore
+  
+
+    
+  </span>
+  
+  
+
+      </a>
+    </li>
+  
+
+              
+            
+              
+                
+  
+  
+  
+  
     <li class="md-nav__item">
       <a href="../syslog/" class="md-nav__link">
         

dev/lag/index.html

@@ -1438,6 +1438,8 @@
         
       
         
+      
+        
       
         
       
@@ -1627,6 +1629,34 @@
   
   
   
+    <li class="md-nav__item">
+      <a href="../keystore/" class="md-nav__link">
+        
+  
+  
+  <span class="md-ellipsis">
+    
+  
+    Keystore
+  
+
+    
+  </span>
+  
+  
+
+      </a>
+    </li>
+  
+
+              
+            
+              
+                
+  
+  
+  
+  
     <li class="md-nav__item">
       <a href="../syslog/" class="md-nav__link">
         

dev/license/index.html

@@ -1321,6 +1321,8 @@
         
       
         
+      
+        
       
         
       
@@ -1510,6 +1512,34 @@
   
   
   
+    <li class="md-nav__item">
+      <a href="../keystore/" class="md-nav__link">
+        
+  
+  
+  <span class="md-ellipsis">
+    
+  
+    Keystore
+  
+
+    
+  </span>
+  
+  
+
+      </a>
+    </li>
+  
+
+              
+            
+              
+                
+  
+  
+  
+  
     <li class="md-nav__item">
       <a href="../syslog/" class="md-nav__link">
         

dev/management/index.html

@@ -13,7 +13,7 @@
         <link rel="prev" href="../hardware/">
       
       
-        <link rel="next" href="../syslog/">
+        <link rel="next" href="../keystore/">
       
       
         
@@ -1325,6 +1325,8 @@
         
       
         
+      
+        
       
         
       
@@ -1661,6 +1663,34 @@
   
   
   
+    <li class="md-nav__item">
+      <a href="../keystore/" class="md-nav__link">
+        
+  
+  
+  <span class="md-ellipsis">
+    
+  
+    Keystore
+  
+
+    
+  </span>
+  
+  
+
+      </a>
+    </li>
+  
+
+              
+            
+              
+                
+  
+  
+  
+  
     <li class="md-nav__item">
       <a href="../syslog/" class="md-nav__link">
         
@@ -2512,6 +2542,12 @@ configuration in <code>ietf-keystore</code>. The only supported hostkey type is
 RSA for now, thus the private key must be
 <code>ietf-crypto-types:rsa-private-key-format</code> and the public key
 <code>ietf-crypto-types:ssh-public-key-format</code></p>
+<div class="admonition tip">
+<p class="admonition-title">Tip</p>
+<p>For comprehensive information about the keystore, including key management,
+security considerations, and examples for different key types, see the
+<a href="../keystore/">Keystore documentation</a>.</p>
+</div>
 <h3 id="use-your-own-ssh-hostkeys">Use your own SSH hostkeys<a class="headerlink" href="#use-your-own-ssh-hostkeys" title="Permanent link">¶</a></h3>
 <p>Hostkeys can be generated with OpenSSL:
 </p><div class="highlight"><pre><span></span><code><a id="__codelineno-0-1" name="__codelineno-0-1" href="#__codelineno-0-1"></a>openssl<span class="w"> </span>genpkey<span class="w"> </span>-quiet<span class="w"> </span>-algorithm<span class="w"> </span>RSA<span class="w"> </span>-pkeyopt<span class="w"> </span>rsa_keygen_bits:2048<span class="w"> </span>-outform<span class="w"> </span>PEM<span class="w"> </span>&gt;<span class="w"> </span>mykey

dev/nacm/index.html

@@ -1325,6 +1325,8 @@
         
       
         
+      
+        
       
         
       
@@ -1866,6 +1868,34 @@
   
   
   
+    <li class="md-nav__item">
+      <a href="../keystore/" class="md-nav__link">
+        
+  
+  
+  <span class="md-ellipsis">
+    
+  
+    Keystore
+  
+
+    
+  </span>
+  
+  
+
+      </a>
+    </li>
+  
+
+              
+            
+              
+                
+  
+  
+  
+  
     <li class="md-nav__item">
       <a href="../syslog/" class="md-nav__link">
         

dev/netboot/index.html

@@ -1323,6 +1323,8 @@
         
       
         
+      
+        
       
         
       
@@ -1512,6 +1514,34 @@
   
   
   
+    <li class="md-nav__item">
+      <a href="../keystore/" class="md-nav__link">
+        
+  
+  
+  <span class="md-ellipsis">
+    
+  
+    Keystore
+  
+
+    
+  </span>
+  
+  
+
+      </a>
+    </li>
+  
+
+              
+            
+              
+                
+  
+  
+  
+  
     <li class="md-nav__item">
       <a href="../syslog/" class="md-nav__link">
         

dev/networking/index.html

@@ -1394,6 +1394,8 @@
         
       
         
+      
+        
       
         
       
@@ -1583,6 +1585,34 @@
   
   
   
+    <li class="md-nav__item">
+      <a href="../keystore/" class="md-nav__link">
+        
+  
+  
+  <span class="md-ellipsis">
+    
+  
+    Keystore
+  
+
+    
+  </span>
+  
+  
+
+      </a>
+    </li>
+  
+
+              
+            
+              
+                
+  
+  
+  
+  
     <li class="md-nav__item">
       <a href="../syslog/" class="md-nav__link">
         

dev/ntp/index.html

@@ -1483,6 +1483,8 @@
         
       
         
+      
+        
       
         
       
@@ -1672,6 +1674,34 @@
   
   
   
+    <li class="md-nav__item">
+      <a href="../keystore/" class="md-nav__link">
+        
+  
+  
+  <span class="md-ellipsis">
+    
+  
+    Keystore
+  
+
+    
+  </span>
+  
+  
+
+      </a>
+    </li>
+  
+
+              
+            
+              
+                
+  
+  
+  
+  
     <li class="md-nav__item">
       <a href="../syslog/" class="md-nav__link">
         

dev/override-package/index.html

@@ -1323,6 +1323,8 @@
         
       
         
+      
+        
       
         
       
@@ -1512,6 +1514,34 @@
   
   
   
+    <li class="md-nav__item">
+      <a href="../keystore/" class="md-nav__link">
+        
+  
+  
+  <span class="md-ellipsis">
+    
+  
+    Keystore
+  
+
+    
+  </span>
+  
+  
+
+      </a>
+    </li>
+  
+
+              
+            
+              
+                
+  
+  
+  
+  
     <li class="md-nav__item">
       <a href="../syslog/" class="md-nav__link">
         

dev/qos/index.html

@@ -1467,6 +1467,8 @@
         
       
         
+      
+        
       
         
       
@@ -1656,6 +1658,34 @@
   
   
   
+    <li class="md-nav__item">
+      <a href="../keystore/" class="md-nav__link">
+        
+  
+  
+  <span class="md-ellipsis">
+    
+  
+    Keystore
+  
+
+    
+  </span>
+  
+  
+
+      </a>
+    </li>
+  
+
+              
+            
+              
+                
+  
+  
+  
+  
     <li class="md-nav__item">
       <a href="../syslog/" class="md-nav__link">
         

dev/routing/index.html

@@ -1577,6 +1577,8 @@
         
       
         
+      
+        
       
         
       
@@ -1766,6 +1768,34 @@
   
   
   
+    <li class="md-nav__item">
+      <a href="../keystore/" class="md-nav__link">
+        
+  
+  
+  <span class="md-ellipsis">
+    
+  
+    Keystore
+  
+
+    
+  </span>
+  
+  
+
+      </a>
+    </li>
+  
+
+              
+            
+              
+                
+  
+  
+  
+  
     <li class="md-nav__item">
       <a href="../syslog/" class="md-nav__link">
         

dev/scripting-netconf/index.html

@@ -1323,6 +1323,8 @@
         
       
         
+      
+        
       
         
       
@@ -1512,6 +1514,34 @@
   
   
   
+    <li class="md-nav__item">
+      <a href="../keystore/" class="md-nav__link">
+        
+  
+  
+  <span class="md-ellipsis">
+    
+  
+    Keystore
+  
+
+    
+  </span>
+  
+  
+
+      </a>
+    </li>
+  
+
+              
+            
+              
+                
+  
+  
+  
+  
     <li class="md-nav__item">
       <a href="../syslog/" class="md-nav__link">
         

dev/scripting-prod/index.html

@@ -1323,6 +1323,8 @@
         
       
         
+      
+        
       
         
       
@@ -1512,6 +1514,34 @@
   
   
   
+    <li class="md-nav__item">
+      <a href="../keystore/" class="md-nav__link">
+        
+  
+  
+  <span class="md-ellipsis">
+    
+  
+    Keystore
+  
+
+    
+  </span>
+  
+  
+
+      </a>
+    </li>
+  
+
+              
+            
+              
+                
+  
+  
+  
+  
     <li class="md-nav__item">
       <a href="../syslog/" class="md-nav__link">
         

dev/scripting-restconf/index.html

@@ -1323,6 +1323,8 @@
         
       
         
+      
+        
       
         
       
@@ -1512,6 +1514,34 @@
   
   
   
+    <li class="md-nav__item">
+      <a href="../keystore/" class="md-nav__link">
+        
+  
+  
+  <span class="md-ellipsis">
+    
+  
+    Keystore
+  
+
+    
+  </span>
+  
+  
+
+      </a>
+    </li>
+  
+
+              
+            
+              
+                
+  
+  
+  
+  
     <li class="md-nav__item">
       <a href="../syslog/" class="md-nav__link">
         

dev/scripting-sysrepocfg/index.html

@@ -1323,6 +1323,8 @@
         
       
         
+      
+        
       
         
       
@@ -1512,6 +1514,34 @@
   
   
   
+    <li class="md-nav__item">
+      <a href="../keystore/" class="md-nav__link">
+        
+  
+  
+  <span class="md-ellipsis">
+    
+  
+    Keystore
+  
+
+    
+  </span>
+  
+  
+
+      </a>
+    </li>
+  
+
+              
+            
+              
+                
+  
+  
+  
+  
     <li class="md-nav__item">
       <a href="../syslog/" class="md-nav__link">
         

dev/scripting/index.html

@@ -1323,6 +1323,8 @@
         
       
         
+      
+        
       
         
       
@@ -1512,6 +1514,34 @@
   
   
   
+    <li class="md-nav__item">
+      <a href="../keystore/" class="md-nav__link">
+        
+  
+  
+  <span class="md-ellipsis">
+    
+  
+    Keystore
+  
+
+    
+  </span>
+  
+  
+
+      </a>
+    </li>
+  
+
+              
+            
+              
+                
+  
+  
+  
+  
     <li class="md-nav__item">
       <a href="../syslog/" class="md-nav__link">
         

dev/sitemap.xml

@@ -2,198 +2,202 @@
 <urlset xmlns="http://www.sitemaps.org/schemas/sitemap/0.9">
     <url>
          <loc>https://kernelkit.github.io/infix/dev/</loc>
-         <lastmod>2026-02-02</lastmod>
+         <lastmod>2026-02-03</lastmod>
     </url>
     <url>
          <loc>https://kernelkit.github.io/infix/dev/boot/</loc>
-         <lastmod>2026-02-02</lastmod>
+         <lastmod>2026-02-03</lastmod>
     </url>
     <url>
          <loc>https://kernelkit.github.io/infix/dev/branding/</loc>
-         <lastmod>2026-02-02</lastmod>
+         <lastmod>2026-02-03</lastmod>
     </url>
     <url>
          <loc>https://kernelkit.github.io/infix/dev/bridging/</loc>
-         <lastmod>2026-02-02</lastmod>
+         <lastmod>2026-02-03</lastmod>
     </url>
     <url>
          <loc>https://kernelkit.github.io/infix/dev/container/</loc>
-         <lastmod>2026-02-02</lastmod>
+         <lastmod>2026-02-03</lastmod>
     </url>
     <url>
          <loc>https://kernelkit.github.io/infix/dev/developers-guide/</loc>
-         <lastmod>2026-02-02</lastmod>
+         <lastmod>2026-02-03</lastmod>
     </url>
     <url>
          <loc>https://kernelkit.github.io/infix/dev/dhcp/</loc>
-         <lastmod>2026-02-02</lastmod>
+         <lastmod>2026-02-03</lastmod>
     </url>
     <url>
          <loc>https://kernelkit.github.io/infix/dev/discovery/</loc>
-         <lastmod>2026-02-02</lastmod>
+         <lastmod>2026-02-03</lastmod>
     </url>
     <url>
          <loc>https://kernelkit.github.io/infix/dev/eth-counters/</loc>
-         <lastmod>2026-02-02</lastmod>
+         <lastmod>2026-02-03</lastmod>
     </url>
     <url>
          <loc>https://kernelkit.github.io/infix/dev/ethernet/</loc>
-         <lastmod>2026-02-02</lastmod>
+         <lastmod>2026-02-03</lastmod>
     </url>
     <url>
          <loc>https://kernelkit.github.io/infix/dev/firewall/</loc>
-         <lastmod>2026-02-02</lastmod>
+         <lastmod>2026-02-03</lastmod>
     </url>
     <url>
          <loc>https://kernelkit.github.io/infix/dev/hardware/</loc>
-         <lastmod>2026-02-02</lastmod>
+         <lastmod>2026-02-03</lastmod>
     </url>
     <url>
          <loc>https://kernelkit.github.io/infix/dev/iface/</loc>
-         <lastmod>2026-02-02</lastmod>
+         <lastmod>2026-02-03</lastmod>
     </url>
     <url>
          <loc>https://kernelkit.github.io/infix/dev/ip/</loc>
-         <lastmod>2026-02-02</lastmod>
+         <lastmod>2026-02-03</lastmod>
+    </url>
+    <url>
+         <loc>https://kernelkit.github.io/infix/dev/keystore/</loc>
+         <lastmod>2026-02-03</lastmod>
     </url>
     <url>
          <loc>https://kernelkit.github.io/infix/dev/lag/</loc>
-         <lastmod>2026-02-02</lastmod>
+         <lastmod>2026-02-03</lastmod>
     </url>
     <url>
          <loc>https://kernelkit.github.io/infix/dev/license/</loc>
-         <lastmod>2026-02-02</lastmod>
+         <lastmod>2026-02-03</lastmod>
     </url>
     <url>
          <loc>https://kernelkit.github.io/infix/dev/management/</loc>
-         <lastmod>2026-02-02</lastmod>
+         <lastmod>2026-02-03</lastmod>
     </url>
     <url>
          <loc>https://kernelkit.github.io/infix/dev/nacm/</loc>
-         <lastmod>2026-02-02</lastmod>
+         <lastmod>2026-02-03</lastmod>
     </url>
     <url>
          <loc>https://kernelkit.github.io/infix/dev/netboot/</loc>
-         <lastmod>2026-02-02</lastmod>
+         <lastmod>2026-02-03</lastmod>
     </url>
     <url>
          <loc>https://kernelkit.github.io/infix/dev/networking/</loc>
-         <lastmod>2026-02-02</lastmod>
+         <lastmod>2026-02-03</lastmod>
     </url>
     <url>
          <loc>https://kernelkit.github.io/infix/dev/ntp/</loc>
-         <lastmod>2026-02-02</lastmod>
+         <lastmod>2026-02-03</lastmod>
     </url>
     <url>
          <loc>https://kernelkit.github.io/infix/dev/override-package/</loc>
-         <lastmod>2026-02-02</lastmod>
+         <lastmod>2026-02-03</lastmod>
     </url>
     <url>
          <loc>https://kernelkit.github.io/infix/dev/qos/</loc>
-         <lastmod>2026-02-02</lastmod>
+         <lastmod>2026-02-03</lastmod>
     </url>
     <url>
          <loc>https://kernelkit.github.io/infix/dev/routing/</loc>
-         <lastmod>2026-02-02</lastmod>
+         <lastmod>2026-02-03</lastmod>
     </url>
     <url>
          <loc>https://kernelkit.github.io/infix/dev/scripting-netconf/</loc>
-         <lastmod>2026-02-02</lastmod>
+         <lastmod>2026-02-03</lastmod>
     </url>
     <url>
          <loc>https://kernelkit.github.io/infix/dev/scripting-prod/</loc>
-         <lastmod>2026-02-02</lastmod>
+         <lastmod>2026-02-03</lastmod>
     </url>
     <url>
          <loc>https://kernelkit.github.io/infix/dev/scripting-restconf/</loc>
-         <lastmod>2026-02-02</lastmod>
+         <lastmod>2026-02-03</lastmod>
     </url>
     <url>
          <loc>https://kernelkit.github.io/infix/dev/scripting-sysrepocfg/</loc>
-         <lastmod>2026-02-02</lastmod>
+         <lastmod>2026-02-03</lastmod>
     </url>
     <url>
          <loc>https://kernelkit.github.io/infix/dev/scripting/</loc>
-         <lastmod>2026-02-02</lastmod>
+         <lastmod>2026-02-03</lastmod>
     </url>
     <url>
          <loc>https://kernelkit.github.io/infix/dev/support/</loc>
-         <lastmod>2026-02-02</lastmod>
+         <lastmod>2026-02-03</lastmod>
     </url>
     <url>
          <loc>https://kernelkit.github.io/infix/dev/syslog/</loc>
-         <lastmod>2026-02-02</lastmod>
+         <lastmod>2026-02-03</lastmod>
     </url>
     <url>
          <loc>https://kernelkit.github.io/infix/dev/system/</loc>
-         <lastmod>2026-02-02</lastmod>
+         <lastmod>2026-02-03</lastmod>
     </url>
     <url>
          <loc>https://kernelkit.github.io/infix/dev/test-arch/</loc>
-         <lastmod>2026-02-02</lastmod>
+         <lastmod>2026-02-03</lastmod>
     </url>
     <url>
          <loc>https://kernelkit.github.io/infix/dev/testing/</loc>
-         <lastmod>2026-02-02</lastmod>
+         <lastmod>2026-02-03</lastmod>
     </url>
     <url>
          <loc>https://kernelkit.github.io/infix/dev/tunnels/</loc>
-         <lastmod>2026-02-02</lastmod>
+         <lastmod>2026-02-03</lastmod>
     </url>
     <url>
          <loc>https://kernelkit.github.io/infix/dev/upgrade/</loc>
-         <lastmod>2026-02-02</lastmod>
+         <lastmod>2026-02-03</lastmod>
     </url>
     <url>
          <loc>https://kernelkit.github.io/infix/dev/virtual/</loc>
-         <lastmod>2026-02-02</lastmod>
+         <lastmod>2026-02-03</lastmod>
     </url>
     <url>
          <loc>https://kernelkit.github.io/infix/dev/vpd/</loc>
-         <lastmod>2026-02-02</lastmod>
+         <lastmod>2026-02-03</lastmod>
     </url>
     <url>
          <loc>https://kernelkit.github.io/infix/dev/vpn-wireguard/</loc>
-         <lastmod>2026-02-02</lastmod>
+         <lastmod>2026-02-03</lastmod>
     </url>
     <url>
          <loc>https://kernelkit.github.io/infix/dev/vpn/</loc>
-         <lastmod>2026-02-02</lastmod>
+         <lastmod>2026-02-03</lastmod>
     </url>
     <url>
          <loc>https://kernelkit.github.io/infix/dev/wifi/</loc>
-         <lastmod>2026-02-02</lastmod>
+         <lastmod>2026-02-03</lastmod>
     </url>
     <url>
          <loc>https://kernelkit.github.io/infix/dev/cli/configure/</loc>
-         <lastmod>2026-02-02</lastmod>
+         <lastmod>2026-02-03</lastmod>
     </url>
     <url>
          <loc>https://kernelkit.github.io/infix/dev/cli/introduction/</loc>
-         <lastmod>2026-02-02</lastmod>
+         <lastmod>2026-02-03</lastmod>
     </url>
     <url>
          <loc>https://kernelkit.github.io/infix/dev/cli/keybindings/</loc>
-         <lastmod>2026-02-02</lastmod>
+         <lastmod>2026-02-03</lastmod>
     </url>
     <url>
          <loc>https://kernelkit.github.io/infix/dev/cli/netcalc/</loc>
-         <lastmod>2026-02-02</lastmod>
+         <lastmod>2026-02-03</lastmod>
     </url>
     <url>
          <loc>https://kernelkit.github.io/infix/dev/cli/quick/</loc>
-         <lastmod>2026-02-02</lastmod>
+         <lastmod>2026-02-03</lastmod>
     </url>
     <url>
          <loc>https://kernelkit.github.io/infix/dev/cli/tcpdump/</loc>
-         <lastmod>2026-02-02</lastmod>
+         <lastmod>2026-02-03</lastmod>
     </url>
     <url>
          <loc>https://kernelkit.github.io/infix/dev/cli/text-editor/</loc>
-         <lastmod>2026-02-02</lastmod>
+         <lastmod>2026-02-03</lastmod>
     </url>
     <url>
          <loc>https://kernelkit.github.io/infix/dev/cli/upgrade/</loc>
-         <lastmod>2026-02-02</lastmod>
+         <lastmod>2026-02-03</lastmod>
     </url>
 </urlset>

dev/support/index.html

@@ -1325,6 +1325,8 @@
         
       
         
+      
+        
       
         
       
@@ -1514,6 +1516,34 @@
   
   
   
+    <li class="md-nav__item">
+      <a href="../keystore/" class="md-nav__link">
+        
+  
+  
+  <span class="md-ellipsis">
+    
+  
+    Keystore
+  
+
+    
+  </span>
+  
+  
+
+      </a>
+    </li>
+  
+
+              
+            
+              
+                
+  
+  
+  
+  
     <li class="md-nav__item">
       <a href="../syslog/" class="md-nav__link">
         

dev/syslog/index.html

@@ -10,7 +10,7 @@
         <link rel="canonical" href="https://kernelkit.github.io/infix/dev/syslog/">
       
       
-        <link rel="prev" href="../management/">
+        <link rel="prev" href="../keystore/">
       
       
         <link rel="next" href="../support/">
@@ -1325,6 +1325,8 @@
         
       
         
+      
+        
       
         
       
@@ -1512,6 +1514,34 @@
                 
   
   
+  
+  
+    <li class="md-nav__item">
+      <a href="../keystore/" class="md-nav__link">
+        
+  
+  
+  <span class="md-ellipsis">
+    
+  
+    Keystore
+  
+
+    
+  </span>
+  
+  
+
+      </a>
+    </li>
+  
+
+              
+            
+              
+                
+  
+  
     
   
   

dev/system/index.html

@@ -1325,6 +1325,8 @@
         
       
         
+      
+        
       
         
       
@@ -1733,6 +1735,34 @@
   
   
   
+    <li class="md-nav__item">
+      <a href="../keystore/" class="md-nav__link">
+        
+  
+  
+  <span class="md-ellipsis">
+    
+  
+    Keystore
+  
+
+    
+  </span>
+  
+  
+
+      </a>
+    </li>
+  
+
+              
+            
+              
+                
+  
+  
+  
+  
     <li class="md-nav__item">
       <a href="../syslog/" class="md-nav__link">
         

dev/test-arch/index.html

@@ -1323,6 +1323,8 @@
         
       
         
+      
+        
       
         
       
@@ -1512,6 +1514,34 @@
   
   
   
+    <li class="md-nav__item">
+      <a href="../keystore/" class="md-nav__link">
+        
+  
+  
+  <span class="md-ellipsis">
+    
+  
+    Keystore
+  
+
+    
+  </span>
+  
+  
+
+      </a>
+    </li>
+  
+
+              
+            
+              
+                
+  
+  
+  
+  
     <li class="md-nav__item">
       <a href="../syslog/" class="md-nav__link">
         

dev/testing/index.html

@@ -1323,6 +1323,8 @@
         
       
         
+      
+        
       
         
       
@@ -1512,6 +1514,34 @@
   
   
   
+    <li class="md-nav__item">
+      <a href="../keystore/" class="md-nav__link">
+        
+  
+  
+  <span class="md-ellipsis">
+    
+  
+    Keystore
+  
+
+    
+  </span>
+  
+  
+
+      </a>
+    </li>
+  
+
+              
+            
+              
+                
+  
+  
+  
+  
     <li class="md-nav__item">
       <a href="../syslog/" class="md-nav__link">
         

dev/tunnels/index.html

@@ -1511,6 +1511,8 @@
         
       
         
+      
+        
       
         
       
@@ -1700,6 +1702,34 @@
   
   
   
+    <li class="md-nav__item">
+      <a href="../keystore/" class="md-nav__link">
+        
+  
+  
+  <span class="md-ellipsis">
+    
+  
+    Keystore
+  
+
+    
+  </span>
+  
+  
+
+      </a>
+    </li>
+  
+
+              
+            
+              
+                
+  
+  
+  
+  
     <li class="md-nav__item">
       <a href="../syslog/" class="md-nav__link">
         

dev/upgrade/index.html

@@ -1325,6 +1325,8 @@
         
       
         
+      
+        
       
         
       
@@ -1514,6 +1516,34 @@
   
   
   
+    <li class="md-nav__item">
+      <a href="../keystore/" class="md-nav__link">
+        
+  
+  
+  <span class="md-ellipsis">
+    
+  
+    Keystore
+  
+
+    
+  </span>
+  
+  
+
+      </a>
+    </li>
+  
+
+              
+            
+              
+                
+  
+  
+  
+  
     <li class="md-nav__item">
       <a href="../syslog/" class="md-nav__link">
         

dev/virtual/index.html

@@ -1323,6 +1323,8 @@
         
       
         
+      
+        
       
         
       
@@ -1512,6 +1514,34 @@
   
   
   
+    <li class="md-nav__item">
+      <a href="../keystore/" class="md-nav__link">
+        
+  
+  
+  <span class="md-ellipsis">
+    
+  
+    Keystore
+  
+
+    
+  </span>
+  
+  
+
+      </a>
+    </li>
+  
+
+              
+            
+              
+                
+  
+  
+  
+  
     <li class="md-nav__item">
       <a href="../syslog/" class="md-nav__link">
         

dev/vpd/index.html

@@ -1323,6 +1323,8 @@
         
       
         
+      
+        
       
         
       
@@ -1512,6 +1514,34 @@
   
   
   
+    <li class="md-nav__item">
+      <a href="../keystore/" class="md-nav__link">
+        
+  
+  
+  <span class="md-ellipsis">
+    
+  
+    Keystore
+  
+
+    
+  </span>
+  
+  
+
+      </a>
+    </li>
+  
+
+              
+            
+              
+                
+  
+  
+  
+  
     <li class="md-nav__item">
       <a href="../syslog/" class="md-nav__link">
         

dev/vpn-wireguard/index.html

@@ -1495,6 +1495,8 @@
         
       
         
+      
+        
       
         
       
@@ -1684,6 +1686,34 @@
   
   
   
+    <li class="md-nav__item">
+      <a href="../keystore/" class="md-nav__link">
+        
+  
+  
+  <span class="md-ellipsis">
+    
+  
+    Keystore
+  
+
+    
+  </span>
+  
+  
+
+      </a>
+    </li>
+  
+
+              
+            
+              
+                
+  
+  
+  
+  
     <li class="md-nav__item">
       <a href="../syslog/" class="md-nav__link">
         
@@ -2557,26 +2587,25 @@ Introduction</a> for a background.</p>
 <h2 id="key-management">Key Management<a class="headerlink" href="#key-management" title="Permanent link">¶</a></h2>
 <p>WireGuard uses public-key cryptography similar to SSH.  Each WireGuard interface
 requires a private key, and each peer is identified by its public key.</p>
-<p><strong>Generate a WireGuard key pair using the <code>wg</code> command:</strong></p>
-<div class="highlight"><pre><span></span><code><a id="__codelineno-0-1" name="__codelineno-0-1" href="#__codelineno-0-1"></a>admin@example:~$<span class="w"> </span>wg<span class="w"> </span>genkey<span class="w"> </span><span class="p">|</span><span class="w"> </span>tee<span class="w"> </span>privatekey<span class="w"> </span><span class="p">|</span><span class="w"> </span>wg<span class="w"> </span>pubkey<span class="w"> </span>&gt;<span class="w"> </span>publickey
-<a id="__codelineno-0-2" name="__codelineno-0-2" href="#__codelineno-0-2"></a>admin@example:~$<span class="w"> </span>cat<span class="w"> </span>privatekey
-<a id="__codelineno-0-3" name="__codelineno-0-3" href="#__codelineno-0-3"></a><span class="nv">aMqBvZqkSP5JrqBvZqkSP5JrqBvZqkSP5JrqBvZqkSP</span><span class="o">=</span>
-<a id="__codelineno-0-4" name="__codelineno-0-4" href="#__codelineno-0-4"></a>admin@example:~$<span class="w"> </span>cat<span class="w"> </span>publickey
-<a id="__codelineno-0-5" name="__codelineno-0-5" href="#__codelineno-0-5"></a><span class="nv">bN1CwZ1lTP6KsrCwZ1lTP6KsrCwZ1lTP6KsrCwZ1lTP</span><span class="o">=</span>
-</code></pre></div>
-<p>This generates a private key, saves it to <code>privatekey</code>, derives the public key,
-and saves it to <code>publickey</code>.</p>
-<p><strong>Import the private key into the keystore:</strong></p>
+<p><strong>Import the key pair into the keystore:</strong></p>
 <pre class="cli"><code>admin@example:/&gt; <b>configure</b>
 admin@example:/config/&gt; <b>edit keystore asymmetric-key wg-site-a</b>
+admin@example:/config/keystore/asymmetric-key/wg-site-a/&gt; <b>do wireguard genkey</b>
+Private: aMqBvZqkSP5JrqBvZqkSP5JrqBvZqkSP5JrqBvZqkSP=
+Public:  bN1CwZ1lTP6KsrCwZ1lTP6KsrCwZ1lTP6KsrCwZ1lTP=
 admin@example:/config/keystore/asymmetric-key/wg-site-a/&gt; <b>set public-key-format x25519-public-key-format</b>
 admin@example:/config/keystore/asymmetric-key/wg-site-a/&gt; <b>set private-key-format x25519-private-key-format</b>
 admin@example:/config/keystore/asymmetric-key/wg-site-a/&gt; <b>set public-key bN1CwZ1lTP6KsrCwZ1lTP6KsrCwZ1lTP6KsrCwZ1lTP=</b>
-admin@example:/config/keystore/asymmetric-key/wg-site-a/&gt; <b>set private-key aMqBvZqkSP5JrqBvZqkSP5JrqBvZqkSP5JrqBvZqkSP=</b>
+admin@example:/config/keystore/asymmetric-key/wg-site-a/&gt; <b>set cleartext-private-key aMqBvZqkSP5JrqBvZqkSP5JrqBvZqkSP5JrqBvZqkSP=</b>
 admin@example:/config/keystore/asymmetric-key/wg-site-a/&gt; <b>leave</b>
 admin@example:/&gt;
 </code></pre>
 
+<div class="admonition tip">
+<p class="admonition-title">Tip</p>
+<p>The <code>do</code> prefix allows running admin-exec commands from configure context.
+Use the base for <code>wireguard genkey</code> when in admin-exec context.</p>
+</div>
 <p><strong>Import peer public keys into the truststore:</strong></p>
 <pre class="cli"><code>admin@example:/&gt; <b>configure</b>
 admin@example:/config/&gt; <b>edit truststore public-key-bag wg-peers public-key peer-b</b>
@@ -2589,8 +2618,7 @@ admin@example:/&gt;
 <div class="admonition tip">
 <p class="admonition-title">Important</p>
 <p>Keep private keys secure!  Never share your private key.  Only exchange
-public keys with peers.  Delete the <code>privatekey</code> file after importing it
-into the keystore.</p>
+public keys with peers.</p>
 </div>
 <h2 id="point-to-point-configuration">Point-to-Point Configuration<a class="headerlink" href="#point-to-point-configuration" title="Permanent link">¶</a></h2>
 <div class="admonition tip">
@@ -2887,16 +2915,15 @@ against future quantum computers that might break elliptic curve cryptography.</
 recording traffic today would still need the PSK even if they break Curve25519
 later.  However, peer authentication still relies on Curve25519, so PSKs don't
 provide complete post-quantum security.</p>
-<p><strong>Generate a preshared key using <code>wg genpsk</code>:</strong></p>
-<div class="highlight"><pre><span></span><code><a id="__codelineno-1-1" name="__codelineno-1-1" href="#__codelineno-1-1"></a>admin@example:~$<span class="w"> </span>wg<span class="w"> </span>genpsk<span class="w"> </span>&gt;<span class="w"> </span>preshared.key
-<a id="__codelineno-1-2" name="__codelineno-1-2" href="#__codelineno-1-2"></a>admin@example:~$<span class="w"> </span>cat<span class="w"> </span>preshared.key
-<a id="__codelineno-1-3" name="__codelineno-1-3" href="#__codelineno-1-3"></a><span class="nv">cO2DxZ2mUQ7LtsrDxZ2mUQ7LtsrDxZ2mUQ7LtsrDxZ2m</span><span class="o">=</span>
-</code></pre></div>
+<p><strong>Generate a preshared key:</strong></p>
+<pre class="cli"><code>admin@example:/config/&gt; <b>do wireguard genpsk</b>
+cO2DxZ2mUQ7LtsrDxZ2mUQ7LtsrDxZ2mUQ7LtsrDxZ2m=
+</code></pre>
+
 <p><strong>Import the preshared key into the keystore:</strong></p>
-<pre class="cli"><code>admin@example:/&gt; <b>configure</b>
-admin@example:/config/&gt; <b>edit keystore symmetric-key wg-psk</b>
-admin@example:/config/keystore/symmetric-key/wg-psk/&gt; <b>set key-format wireguard-symmetric-key-format</b>
-admin@example:/config/keystore/symmetric-key/wg-psk/&gt; <b>set key cO2DxZ2mUQ7LtsrDxZ2mUQ7LtsrDxZ2mUQ7LtsrDxZ2m=</b>
+<pre class="cli"><code>admin@example:/config/&gt; <b>edit keystore symmetric-key wg-psk</b>
+admin@example:/config/keystore/symmetric-key/wg-psk/&gt; <b>set key-format octet-string-key-format</b>
+admin@example:/config/keystore/symmetric-key/wg-psk/&gt; <b>set cleartext-symmetric-key cO2DxZ2mUQ7LtsrDxZ2mUQ7LtsrDxZ2mUQ7LtsrDxZ2m=</b>
 admin@example:/config/keystore/symmetric-key/wg-psk/&gt; <b>end</b>
 admin@example:/config/interface/wg0/&gt; <b>edit wireguard peers wg-peers peer remote</b>
 admin@example:/config/interface/…/wg-peers/peer/remote/&gt; <b>set preshared-key wg-psk</b>
@@ -2909,8 +2936,7 @@ on both sides.</p>
 <div class="admonition tip">
 <p class="admonition-title">Important</p>
 <p>Preshared keys must be kept secret and exchanged through a secure channel,
-just like passwords.  Delete the <code>preshared.key</code> file after importing it
-into both peer keystores.</p>
+just like passwords.</p>
 </div>
 
 

dev/vpn/index.html

@@ -1424,6 +1424,8 @@
         
       
         
+      
+        
       
         
       
@@ -1613,6 +1615,34 @@
   
   
   
+    <li class="md-nav__item">
+      <a href="../keystore/" class="md-nav__link">
+        
+  
+  
+  <span class="md-ellipsis">
+    
+  
+    Keystore
+  
+
+    
+  </span>
+  
+  
+
+      </a>
+    </li>
+  
+
+              
+            
+              
+                
+  
+  
+  
+  
     <li class="md-nav__item">
       <a href="../syslog/" class="md-nav__link">
         

dev/wifi/index.html

@@ -1347,6 +1347,17 @@
       </ul>
     </nav>
   
+</li>
+      
+        <li class="md-nav__item">
+  <a href="#passphrase-requirements" class="md-nav__link">
+    <span class="md-ellipsis">
+      
+        Passphrase Requirements
+      
+    </span>
+  </a>
+  
 </li>
       
         <li class="md-nav__item">
@@ -1644,6 +1655,8 @@
         
       
         
+      
+        
       
         
       
@@ -1833,6 +1846,34 @@
   
   
   
+    <li class="md-nav__item">
+      <a href="../keystore/" class="md-nav__link">
+        
+  
+  
+  <span class="md-ellipsis">
+    
+  
+    Keystore
+  
+
+    
+  </span>
+  
+  
+
+      </a>
+    </li>
+  
+
+              
+            
+              
+                
+  
+  
+  
+  
     <li class="md-nav__item">
       <a href="../syslog/" class="md-nav__link">
         
@@ -2632,6 +2673,17 @@
       </ul>
     </nav>
   
+</li>
+      
+        <li class="md-nav__item">
+  <a href="#passphrase-requirements" class="md-nav__link">
+    <span class="md-ellipsis">
+      
+        Passphrase Requirements
+      
+    </span>
+  </a>
+  
 </li>
       
         <li class="md-nav__item">
@@ -3061,6 +3113,25 @@ CoffeeShop           00:1a:2b:3c:4d:5e  Open           bad           1
 <p>In the CLI, signal strength is reported as: excellent, good, fair or bad.
 For precise signal strength values in dBm, use NETCONF or RESTCONF to access
 the <code>signal-strength</code> leaf in the operational datastore.</p>
+<h2 id="passphrase-requirements">Passphrase Requirements<a class="headerlink" href="#passphrase-requirements" title="Permanent link">¶</a></h2>
+<p>To ensure your connection is secure and compatible with all network
+hardware, your passphrase must meet the following criteria:</p>
+<ul>
+<li>Length: Between 8 and 63 characters</li>
+<li>Characters: Use only standard English keyboard characters<ul>
+<li>Allowed: Letters (A-Z, a-z), numbers (0-9), and common symbols (e.g., ! @ # $ % ^ &amp; * ( ) _ + - = [ ] { } | ; : ' " , . &lt; &gt; / ? ~)</li>
+<li>Spaces: Spaces are allowed, but not at the very beginning or very end of the passphrase</li>
+<li>Prohibited: Emojis, accented characters (like á or ñ), and special "control" characters</li>
+</ul>
+</li>
+</ul>
+<div class="admonition tip">
+<p class="admonition-title">Why the limit?</p>
+<p>Standard WiFi security (WPA2/WPA3) requires a minimum of 8 characters to
+prevent "brute-force" hacking.  The character limit ensures your password
+works on older routers and various operating systems.<br>
+Tips for password strength, see <a href="https://xkcd.com/936/">XKCD #936</a>.</p>
+</div>
 <h2 id="station-mode-client">Station Mode (Client)<a class="headerlink" href="#station-mode-client" title="Permanent link">¶</a></h2>
 <p>Station mode connects to an existing Wi-Fi network. Before configuring station
 mode, follow the "Discovering Available Networks (Scanning)" section above to
@@ -3069,11 +3140,15 @@ scan for available networks and identify the SSID you want to connect to.</p>
 <p>Create a keystore entry for your WiFi password (8-63 characters):</p>
 <pre class="cli"><code>admin@example:/&gt; <b>configure</b>
 admin@example:/config/&gt; <b>edit keystore symmetric-key my-wifi-key</b>
-admin@example:/config/keystore/…/my-wifi-key/&gt; <b>set key-format wifi-preshared-key-format</b>
-admin@example:/config/keystore/…/my-wifi-key/&gt; <b>set symmetric-key MyPassword123</b>
+admin@example:/config/keystore/…/my-wifi-key/&gt; <b>set key-format passphrase-key-format</b>
+admin@example:/config/keystore/…/my-wifi-key/&gt; <b>change cleartext-symmetric-key</b>
+Passphrase: ************
+Retype passphrase: ************
 admin@example:/config/keystore/…/my-wifi-key/&gt; <b>leave</b>
 </code></pre>
 
+<p>The <code>change</code> command prompts for the passphrase interactively and
+handles the base64 encoding required by the keystore automatically.</p>
 <h3 id="step-2-connect-to-network">Step 2: Connect to Network<a class="headerlink" href="#step-2-connect-to-network" title="Permanent link">¶</a></h3>
 <p>Configure station mode with the SSID and password to connect:</p>
 <pre class="cli"><code>admin@example:/&gt; <b>configure</b>
@@ -3089,8 +3164,9 @@ name                : wifi0
 type                : wifi
 operational status  : up
 physical address    : f0:09:0d:36:5f:86
-SSID                : MyHomeNetwork
-Signal              : excellent
+mode                : station
+ssid                : MyHomeNetwork
+signal              : -52 dBm (good)
 </code></pre>
 
 <p><strong>Station configuration parameters:</strong></p>
@@ -3121,8 +3197,10 @@ create a keystore entry for your WiFi password and configure the AP interface:</
 <p><strong>Step 1: Create keystore entry for the WiFi password</strong></p>
 <pre class="cli"><code>admin@example:/&gt; <b>configure</b>
 admin@example:/config/&gt; <b>edit keystore symmetric-key my-wifi-secret</b>
-admin@example:/config/keystore/…/my-wifi-secret/&gt; <b>set key-format wifi-preshared-key-format</b>
-admin@example:/config/keystore/…/my-wifi-secret/&gt; <b>set symmetric-key MySecurePassword123</b>
+admin@example:/config/keystore/…/my-wifi-secret/&gt; <b>set key-format passphrase-key-format</b>
+admin@example:/config/keystore/…/my-wifi-secret/&gt; <b>change cleartext-symmetric-key</b>
+Passphrase: ************
+Retype passphrase: ************
 admin@example:/config/keystore/…/my-wifi-secret/&gt; <b>end</b>
 </code></pre>
 
@@ -3176,14 +3254,20 @@ admin@example:/config/hardware/component/radio0/wifi-radio/&gt; <b>leave</b>
 <p><strong>Step 2: Configure keystore secrets</strong></p>
 <pre class="cli"><code>admin@example:/&gt; <b>configure</b>
 admin@example:/config/&gt; <b>edit keystore symmetric-key main-secret</b>
-admin@example:/config/keystore/…/main-secret/&gt; <b>set key-format wifi-preshared-key-format</b>
-admin@example:/config/keystore/…/main-secret/&gt; <b>set symmetric-key MyMainPassword</b>
+admin@example:/config/keystore/…/main-secret/&gt; <b>set key-format passphrase-key-format</b>
+admin@example:/config/keystore/…/main-secret/&gt; <b>change cleartext-symmetric-key</b>
+Passphrase: ************
+Retype passphrase: ************
 admin@example:/config/&gt; <b>edit keystore symmetric-key guest-secret</b>
-admin@example:/config/keystore/…/guest-secret/&gt; <b>set key-format wifi-preshared-key-format</b>
-admin@example:/config/keystore/…/guest-secret/&gt; <b>set symmetric-key GuestPassword123</b>
+admin@example:/config/keystore/…/guest-secret/&gt; <b>set key-format passphrase-key-format</b>
+admin@example:/config/keystore/…/guest-secret/&gt; <b>change cleartext-symmetric-key</b>
+Passphrase: ************
+Retype passphrase: ************
 admin@example:/config/&gt; <b>edit keystore symmetric-key iot-secret</b>
-admin@example:/config/keystore/…/iot-secret/&gt; <b>set key-format wifi-preshared-key-format</b>
-admin@example:/config/keystore/…/iot-secret/&gt; <b>set symmetric-key IoTDevices2025</b>
+admin@example:/config/keystore/…/iot-secret/&gt; <b>set key-format passphrase-key-format</b>
+admin@example:/config/keystore/…/iot-secret/&gt; <b>change cleartext-symmetric-key</b>
+Passphrase: ************
+Retype passphrase: ************
 admin@example:/config/keystore/…/iot-secret/&gt; <b>leave</b>
 </code></pre>
 
@@ -3269,8 +3353,8 @@ If issues arise, try the following troubleshooting steps:</p>
 <ol>
 <li><strong>Verify signal strength</strong>: Check that the target network shows
    "good" or "excellent" signal in scan results</li>
-<li><strong>Check credentials</strong>: Verify the preshared key in the keystore
-   matches the network password</li>
+<li><strong>Check credentials</strong>: Use <code>show keystore symmetric &lt;name&gt;</code> to verify
+   the passphrase matches the network password</li>
 <li><strong>Review logs</strong>: Check system logs with <code>show log</code> for Wi-Fi related
    errors</li>
 <li><strong>Regulatory compliance</strong>: Ensure the country-code on the radio