MKFM
The mkfm utility is used to time-stamp, hash, and sign an FM binary image
Synopsis
mkfm -f<filename> -k<key> -o<filename> [-3]
| Option | Description | 
|---|---|
–f<filename>
                                                             | 
                                                            --input-file=<filename> This specifies the relative or full path to the FM binary image. | 
–k<key>
                                                             | 
                                                            --private-key=<key> This is the name of the private key, which is going to be used to sign the FM image. The format of the key is “TokenName(PIN)/KeyName”, or “TokenName/KeyName”. The private keys stored in admin token cannot be used with this utility. | 
–o<filename>
                                                             | 
                                                            --output-file=<filename> This specifies the relative or full path to the downloadable FM image. | 
-3
                                                             | 
                                                            Specify this option if you want to sign a new FM with an existing certificate that was created for use with Protect Processor Orange 3 (SafeNet ProtectToolkit 3). |