diff --git a/key_setup.sh b/key_setup.sh
new file mode 100755
index 0000000..4937ca1
--- /dev/null
+++ b/key_setup.sh
@@ -0,0 +1,66 @@
+#!/bin/bash
+
+EXPECTED_ARGS=3 #site, operator, router
+E_BADARGS=65
+if [ $# -ne $EXPECTED_ARGS ]
+then
+  echo "Usage: `basename $0` <site name> <operator name> <router name>"
+  echo "Example: `basename $0` memphis.edu user1 cs/rtr1" 
+  exit $E_BADARGS
+fi
+
+
+RESULT=`ps -a | sed -n /ccnr/p`
+
+if [ "${RESULT:-null}" = null ]; then
+  echo "ccnr not running, quitting"
+  exit
+fi
+
+
+KSUITE=/home/"$(whoami)"/ndn-testbed-key-suite/bin
+SITE=$1
+OP=$2
+RTR=$3
+
+if [ ! -d ${SITE}_key ]; then
+	mkdir ${SITE}_key
+	ccninitkeystore ${SITE}_key
+fi
+
+if [ ! -d ${OP}_key ]; then
+	mkdir ${OP}_key
+	ccninitkeystore ${OP}_key
+fi
+
+if [ ! -d "router_key" ]; then
+	mkdir router_key
+	ccninitkeystore router_key
+fi
+
+if [ ! -d "nlsr_key" ]; then
+	mkdir nlsr_key
+	ccninitkeystore nlsr_key
+fi
+
+
+
+
+$KSUITE/ndn-extract-public-key.sh -i ${SITE}_key/.ccnx/.ccnx_keystore -o ${SITE}_key/$SITE.pem
+$KSUITE/ndn-extract-public-key.sh -i ${OP}_key/.ccnx/.ccnx_keystore -o ${OP}_key/$OP.pem
+$KSUITE/ndn-extract-public-key.sh -i router_key/.ccnx/.ccnx_keystore -o router_key/router.pem
+$KSUITE/ndn-extract-public-key.sh -i nlsr_key/.ccnx/.ccnx_keystore -o nlsr_key/nlsr.pem
+
+./sign.sh -s
+
+#signing operator key
+echo "$KSUITE/ndn-publish-key.sh -i "$OP" -a "$SITE" -f ${OP}_key/$OP.pem -F ${SITE}_key/.ccnx/ -P /ndn/keys/$SITE -p /ndn/keys/$SITE/%C1.O.N.Start/$OP -x 365"
+$KSUITE/ndn-publish-key.sh -i "$OP" -a "$SITE" -f ${OP}_key/$OP.pem -F ${SITE}_key/.ccnx/ -P /ndn/keys/$SITE -p /ndn/keys/$SITE/%C1.O.N.Start/$OP -x 365
+
+#signing routing key
+echo "$KSUITE/ndn-publish-key.sh -i "$RTR" -a "$SITE" -f router_key/router.pem -F ${OP}_key/.ccnx/ -P /ndn/keys/$SITE/%C1.O.N.Start/$OP -p /ndn/keys/$SITE/%C1.R.N.Start/ndn/$SITE/$RTR -x 365"
+$KSUITE/ndn-publish-key.sh -i "$RTR" -a "$SITE" -f router_key/router.pem -F ${OP}_key/.ccnx/ -P /ndn/keys/$SITE/%C1.O.N.Start/$OP -p /ndn/keys/$SITE/%C1.R.N.Start/ndn/$SITE/$RTR -x 365
+
+#signing nlsr key
+echo "$KSUITE/ndn-publish-key.sh -i "NLSR" -a "$RTR" -f nlsr_key/nlsr.pem  -F router_key/.ccnx/ -P /ndn/keys/$SITE/%C1.R.N.Start/ndn/$SITE/$RTR -p /ndn/keys/$SITE/%C1.R.N.Start/ndn/$SITE/$RTR/nlsr -x 365"
+$KSUITE/ndn-publish-key.sh -i "NLSR" -a "$RTR" -f nlsr_key/nlsr.pem  -F router_key/.ccnx/ -P /ndn/keys/$SITE/%C1.R.N.Start/ndn/$SITE/$RTR -p /ndn/keys/$SITE/%C1.R.N.Start/ndn/$SITE/$RTR/nlsr -x 365