Comment 4 for bug 1605699

Same error for me, installing on debian jessie:

# keystone-manage fernet_setup --keystone-user keystone --keystone-group keystone
usage: keystone-manage [db_sync|db_version|pki_setup|ssl_setup|token_flush]
keystone-manage: error: argument command: invalid choice: 'fernet_setup' (choose from 'db_sync', 'db_version', 'pki_setup', 'ssl_setup', 'token_flush')
# keystone --version
0.10.1
#keystone-manage --version
2014.1.3

# apt-cache show keystone
Package: keystone
Version: 2:9.0.0-2~bpo8+1
Installed-Size: 366
Maintainer: PKG OpenStack <email address hidden>
Architecture: all
Depends: adduser, dbconfig-common, init-system-helpers (>= 1.18~), python-keystone (= 2:9.0.0-2~bpo8+1), q-text-as-data, sqlite3, ssl-cert (>= 1.0.12), debconf (>= 0.5) | debconf-2.0, lsb-base (>= 3.0-6), python
Suggests: apparmor
Description-en: OpenStack identity service
 This is the identity service used by OpenStack for authentication (authN)
 and high-level authorization (authZ). It currently supports token-based
 authN with user/service authZ, and is scalable to support OAuth, SAML,
 and OpenID in future versions. Out of the box, Keystone uses SQLite for
 its identity store database, with the option to connect to external LDAP.
 .
 This package contains the daemons.
Description-md5: 1b67519deaaf4579dcc19e2b1805131b
Homepage: http://keystone.openstack.org/
Section: python
Priority: extra
Filename: pool/main/k/keystone/keystone_9.0.0-2~bpo8+1_all.deb
Size: 91106
MD5sum: ae410e7463ed00aa3731a26d24a366ee
SHA1: 4b6196add12ccb9a9f20fe3fa58c27f82f25f4a3
SHA256: 7625f0b502b9b08d8a293822143c7b955d4edb73cccd20488d5ea558e02a624e

Package: keystone
Version: 2014.1.3-6
Installed-Size: 495
Maintainer: PKG OpenStack <email address hidden>
Architecture: all
Depends: adduser, dbconfig-common, init-system-helpers (>= 1.18~), python-configobj, python-keystone (= 2014.1.3-6), sqlite3, ssl-cert (>= 1.0.12), debconf (>= 0.5) | debconf-2.0, lsb-base (>= 3.0-6), python:any
Pre-Depends: dpkg (>= 1.15.6~)
Description-en: OpenStack identity service
 This is the identity service used by OpenStack for authentication (authN)
 and high-level authorization (authZ). It currently supports token-based
 authN with user/service authZ, and is scalable to support OAuth, SAML,
 and OpenID in future versions. Out of the box, Keystone uses SQLite for
 its identity store database, with the option to connect to external LDAP.