VMS Help DCE_SECURITY, Admin Intro, rgy_edit, key_management_commands, ktadd  *Conan The Librarian (sorry for the slow response - running on an old VAX)

   kta[dd] -p principal_name [-pw password] [-a[uto]] [-r[egistry]]
                             [-f key-file]

   Creates a password for a server or machine in the keytab file on the
   local node.

   The -p option specifies the name of the server or machine principal
   for which you are creating a password.

   The -pw option lets you supply the password on the command line.  If
   you do not enter this option or the -auto option, ktadd prompts for
   the password.

   The -a option generates the password randomly.  If you use this
   option, you must also use the -r option.  If you do not specify
   the -auto or the -pw option, you are prompted for a password.

   The -r option updates the principal's password in the registry to
   match the string you enter (or automatically generate) for the
   password in the keytab file.  Use it to ensure that the principal's
   password in the registry and the keytab file are in synch when you
   change a principal's password in the keytab file.  To use this
   option, a password for the principal must exist in the default
   keytab file or the keytab file named by the -f option.

   The -f option specifies the name of the server keytab file on the
   local node to which you are adding the password. If you do not
   specify a keytab file name, dce$local:[krb5]v5srvtab.; is used.
   Note that you must be privileged to add entries in the default
   keytab file.