PicoKey App
PicoKey App is the official desktop application for managing, configuring and updating all devices in the PicoKeys ecosystem, including Pico HSM, Pico FIDO, Pico OpenPGP, and PicoBoot.
It provides an intuitive interface to:
- View device information
- Perform initialization and provisioning
- Configure security settings
- Manage USB and LED parameters
- Enable Secure Boot and Secure Lock
- Commission devices for production use
- Update firmware through an integrated installer
PicoKey App is available for Windows, macOS, and Linux.
If you own an ESP32-S3 board, go to ESP32 flasher.
If you own a Raspberry Pico, select the vendor and model of your board from the following list and download the proper firmware.
Windows
10/11
64-bit (x86_64)
Ubuntu/Debian
22.04 / 12
x86_64
arm64
armv7
macOS
15 Sequoia
Apple Silicon
Intel based
PicoKey App is a living development app, whose plans include key management, advanced features and recovery aspects, amongst others. PicoKey App provides full support for:
Device Management
- Real-time device detection
- Smartcard and HID communication
- Memory inspection (free / used / total)
Firmware Management
- Update directly via BOOTSEL
- Automatic mode switching
- Pre-validated firmware packages
Configuration
- USB VID/PID settings
- Product string configuration
- LED control and timeouts
- secp256k1 enabling (advanced)
- Presence button timeout and LED drivers
Security & Provisioning
- PIN and SO-PIN setup
- DKEK shares
- PUK authentication limits
- RP-IDs (FIDO)
- Secure Boot and Secure Lock
- Factory reset procedures
User Guide
Full user documentation is available here:👉 PicoKey App User Guide
-
Led Light Codes
Pico HSM uses the led to indicate the current status. Four states are available: Press to confirm The Led is almost on all the time. It goes off for 100 milliseconds every second. In this state, you have to press BOOTSEL button to confirm operation (i.e., confirm a signature generation). The operation will timeout in…
-
Generate and Sign a Certificate
Pico HSM allows you generating lots of keypairs (public and private). It supports different types of cryptographic keys and thanks to PKCS11 interface, it can be used with any app implementing PKCS11 interface to sign a certificate request. Once the certificate is generated and signed, it can be easily examined with usual tools:
-
Keypair Generation and Key Management
Pico HSM allows you generating multiple keypair (public and private). It supports different types of cryptographic keys and thanks to PKCS11 interface, it can be used with any app implementing PKCS11 interface. The ID parameter is an internal hexadecimal number for easy identification. The label is a string that also identifies the key. Despite it…