Keyboxxml: New

For the first time, Google has published an official XSD schema for KeyboxXML. A "new" keybox must pass xmllint --schema keybox_schema.xsd validation. Previously, OEMs accepted malformed XML; now, strict parsing is enforced.

To add a new SSH key configuration, you can add a <key> element to the <keys> section of the keybox.xml file. For example: keyboxxml new

<keys>
  <key>
    <name>mykey</name>
    <path>~/.ssh/mykey</path>
  </key>
</keys>

The new schema requires the chain from leaf to root. Reverse order (root to leaf) invalidates the keybox. For the first time, Google has published an