Starting from firmware version 2.0.0, CanoKey supports reading PIV metadata with the Get Metadata command (INS F7). The command takes a reference: PIN (80), PUK (81), the management key (9B), or a supported asymmetric-key slot. The response follows the Yubico PIV metadata TLV format and reports values such as the algorithm, the PIN and touch policies, the key’s origin (generated or imported), the public key, whether the secret still has its default value, and the retry counters, where applicable.
Reading the metadata is the reliable way to determine the policies and algorithms in use on a device, since defaults differ between firmware versions.
Firmware version 3.1.1 and later support moving a key from one slot to another and deleting a key, using the Move/Delete Key command (INS F6). Both operations require management-key authentication, and the destination slot of a move must be empty. Only the private key and its metadata are affected; the corresponding certificate objects are not moved or deleted with the key.