PKCS11 configuration file

The PKCS11 configuration file is specified for the IBMPKCS11Impl security provider in the java.security file used in the JSSE study.

The contents of the PKCS11 configuration file for Java™ Version 5 used for the JSSE study are shown here.

There is a PKCS11 configuration file on both the JSSE client and server LPARs. The slotListIndex value is normally zero when there is one Cryptographic feature per LPAR. Some available encryption algorithms are not supported on the hardware device, so these algorithms are in the disabled list. Different Java versions might require different PKCS11 configuration files.

name = JSSEProvider
library=/usr/lib/pkcs11/PKCS11_API.so64
description=zlinux64bit


slotListIndex = 0

disabledmechanisms = {
CKM_SHA_1
CKM_MD5
}


Sample PKCS11 configuration file