pkcsconf(1) [debian man page]

PKCSCONF(1)							   openCryptoki 						       PKCSCONF(1)

NAME

       pkcsconf - configuration utility for the pkcsslotd daemon

SYNOPSIS

       pkcsconf [-itsmMIupP] [-c slotnumber -U userPIN -S SOPin -n newpin]

DESCRIPTION

       The pkcsconf utility displays and configures the state of the pkcsslotd daemon and the tokens managed by the daemon.

COMMAND SUMMARY

       -i	 display PKCS11 info

       -t	 display token info

       -s	 display slot info

       -m	 display mechanism list

       -I	 initialize token

       -u	 initialize user PIN

       -p	 set the user PIN

       -P	 set the SO PIN

       -c SLOT	 specify the token slot for the operation

       -U USERPIN
		 the current user pin (for use when changing the user pin; -u and -p options); if not specified, user will be prompted

       -S SOPIN  the current Security Officer (SO) pin (for use when changing the SO pin; -P option); if not specified, user will be prompted

       -n NEWPIN the  new  pin	(for  use  when changing either the user pin or the SO pin; -u, -p and -P options); if not specified, user will be
		 prompted

SEE ALSO

       opencryptoki(7),
       pkcsslotd(8).

2.3.1								     May 2007							       PKCSCONF(1)

OPENCRYPTOKI(7) 						   openCryptoki 						   OPENCRYPTOKI(7)

NAME

       openCryptoki - A PKCS#11 implementation.

DESCRIPTION

       openCryptoki  is  an  implementation  of  the  PKCS#11  API standard. It provides an interface to the functions of underlying cryptographic
       tokens, which may be implemented via software or hardware. The PKCS#11 specification has been released by RSA  Labs.  More  information	on
       PKCS#11 can be found on the RSA labs website: http://www.rsa.com/rsalabs.

       To  use openCryptoki, run the pkcsslotd daemon. The daemon will read the opencryptoki.conf file to collect information about the tokens and
       their slots.

       Use the pkcsconf utility to further configure openCryptoki once the daemon is running.

SECURITY NOTE

       All non-root users that require access to PKCS#11 tokens using openCryptoki must be assigned to the pkcs11 group to be able to  communicate
       with  the  pkcsslotd daemon. Only fully trusted users should be granted membership in the group. Group members can block other openCryptoki
       users from accessing PKCS#11 tokens, and execute arbitrary code with the privileges of other openCryptoki users.

SEE ALSO

       pkcsslotd(8),
       pkcsconf(1),
       opencryptoki.conf(5).

3.0								     May 2007							   OPENCRYPTOKI(7)