Adding the user to the PKCS11 group

Non-root users running applications using the PKCS#11 API must belong to the pkcs11 group.

If the application server runs under a non-root user (for example, wasadmin), this user ID must be added to the pkcs11 group. The root user is automatically added when the pkcs11_startup command is called the first time.

List pkcs11 group members and add (optional) required user IDs:

Sample commands: add the wasadmin user to the pkcs11 group

# grep pkcs11 /etc/group 
pkcs11:!:64:root
# usermod -G pkcs11 wasadmin