Adding or removing PKCS#11 slots and tokens

If you don't want to share a PKCS#11 token password with multiple users, you can create more PKCS#11 slots.

After you create a new PKCS#11 slot, it automatically creates and maps a new PKCS#11 token. You can then set each new PKCS#11 token with a unique user password.

A PKCS#11 token with a user password can protect one or multiple private objects. A PKCS#11 token without a user password can save, erase, export, and otherwise manage only public objects.

Creating a PKCS#11 slot and token

To create a PKCS#11 slot and token, complete the following steps:
  1. Enter the slot management script by typing smit acf_p11admin.
  2. Select Manage PKCS#11 Slots.
  3. Select Create PKCS# Slot.
  4. Enter a unique slot ID. PKCS#11 slot IDs are positive integer numbers.
  5. Enter a name for the PKCS#11 slot.
  6. Select Create New Slot and press Enter.

Deleting an existing PKCS#11 slot and token

Note: If you delete a PKCS#11 slot, the PKCS#11 token that is associated with the PKCS#11 slot will also be deleted. If the token has objects, such as keys or self-signed certificates, or if other applications are accessing the PKCS#11 token, the delete operation will fail. Ensure that the application does not use the token or references objects in the PKCS#11 token before deleting the PKCS#11 token.

To delete an existing PKCS#11 slot and token, complete the following steps:

  1. Enter the slot management script by typing smit acf_p11admin.
  2. Select Manage PKCS#11 Slots.
  3. Select Delete Existing Slot.
  4. Enter the slot ID.
  5. Select Delete Slot and press Enter.