Checking the EP11 token status

You can request information about the EP11 token status by using the pkcsconf -t command. The Flags entry shows the actual status flags for the token and whether the token is ready to be used. In the shown example, the SO PIN needs to be changed before the token can be used.

$ pkcsconf -t

Token #1 Info:
    ...                
	Model: IBM EP11Tok     
	...
	Flags: 0x80044D 
          (RNG|LOGIN_REQUIRED|USER_PIN_INITIALIZED|CLOCK_ON_TOKEN|TOKEN_INITIALIZED
              |SO_PIN_TO_BE_CHANGED)
 ...
 ...
	Time: 15:29:43