.Op Fl K Ar provider_info

.Nm ssh-add

.Fl I Ar pkcs11_id Op Ar session_cache Op Ar cert_file

.It Fl I

Add PKCS#11 key, the format of remaining arguments is:

.Pp

pkcs11_id [session_cache [cert_file]]

.Pp

.Bl -tag -width Ds -compact

.It pkcs11_id

Serialized id, get from ssh-keygen \-K.

.It session_cache

Session cache timeout in seconds \-1 for infinite.

.It cert_file

Specify PEM file to load if token is unavailable.

.El

.It Fl K Ar provider_info

Add PKC#11 provider to the agent,

.Ar provider_info

format:

.Pp

lib[:prot_auth[:private_mode[:cert_is_private]]]

.Pp

.Bl -tag -width Ds -compact

.It prot_auth

1 to allow protected mode authentication.

.It private_mode:

.Bl -tag -width Ds -compact

.It 0

determine automatically

.It 1

perform sign

.It 2

perform sign recover

.It 4

perform decrypt

.It 8

perform unwrap

.El

.It cert_is_private

1 if login is required to access certificate objects.

.El