Adding or removing PKCS#11 slots and tokens
If you don't want to share a PKCS#11 token password with multiple users, you can create more PKCS#11 slots.
After you create a new PKCS#11 slot, it automatically creates and maps a new PKCS#11 token. You can then set each new PKCS#11 token with a unique user password.
A PKCS#11 token with a user password can protect one or multiple private objects. A PKCS#11 token without a user password can save, erase, export, and otherwise manage only public objects.
Creating a PKCS#11 slot and token
To create a PKCS#11 slot and token, complete the following steps:
- Enter the slot management script by typing smit acf_p11admin.
- Select Manage PKCS#11 Slots.
- Select Create PKCS# Slot.
- Enter a unique slot ID. PKCS#11 slot IDs are positive integer numbers.
- Enter a name for the PKCS#11 slot.
- Select Create New Slot and press Enter.
Deleting an existing PKCS#11 slot and token
Note: If you delete a PKCS#11 slot, the PKCS#11 token that is associated with the PKCS#11 slot will
also be deleted. If the token has objects, such as keys or self-signed certificates, or if other
applications are accessing the PKCS#11 token, the delete operation will fail. Ensure that the
application does not use the token or references objects in the PKCS#11 token before deleting the
PKCS#11 token.
To delete an existing PKCS#11 slot and token, complete the following steps:
- Enter the slot management script by typing smit acf_p11admin.
- Select Manage PKCS#11 Slots.
- Select Delete Existing Slot.
- Enter the slot ID.
- Select Delete Slot and press Enter.