Setup the openCryptoki password

Edit online

These steps are used to set up the openCryptoki password for the JSSE study.

Before you begin, issue this command to become familiar with the command parameters:
pkcsconf
The command output lists the command operands and their meaning.
pkcsconf [-itsmMIupP] [-c slotnumber -U userPIN -S SOPin -n newpin]
-Use pkcsconf64 for a 64-bit system instead of pkcsconf.

-i display PKCS11 info
-t display token info
-s display slot info
-m display mechanism list
-I initialize token 
-u initialize user PIN
-p set the user PIN
-P set the SO PIN

Setting up the openCryptoki password for each cryptographic feature installed

These steps must be repeated for each cryptographic feature installed, matching the corresponding slot number with the -c n argument (as reported from the output of the pkcsconf -t command).
  1. Initialize System Operator PIN and initialize token:
    pkcsconf64 -I -c 0 (uppercase I)
Enter the SO PIN: ********               -> 87654321 (default)
Enter a unique token label: zlinux64bit
    (The pkcsconf64 -t # command displays token information.)
  2. Set the User PIN:
     pkcsconf64 -u -c 0                     -> was64usr
 Enter the new user PIN: ********       -> 87654321
 Re-enter the new user PIN: ********    -> 87654321
  3. Change the password for the System Operator:
    pkcsconf64 -P -c0                       -> was64usr
  4. Change the password for the User:
    pkcsconf64 -p -c 0                      -> was64usr
  5. The User password is used to access the token from the application. Record the unique tokens and passwords for later use by the iKeyman utility.
Note: Passwords used here are samples. Choose your password according to your password policies.

Cleaning up

To clean up after unsuccessful pkcsconf command operations, issue these commands:
cd /var/lib/opencryptoki
 rm -R *
 rcpkcsslotd stop
 rcpkcsslotd start