cryptographypkcs#11hsmopensc

Unable to use pkcs11-tool with custom hsm roles

i am working on a HSM which has a custom user role: crypto user. how can i use pkcs11-tool to login or work with that user on Hsm? it works with user or SO not sure how can i use with custom roles specific to hsm.

Solution

  • Given the implementation of pkcs11-tool it is not possible to specify CKU_CRYPTO_USER.

    It would make sense to patch pkcs11-tool to support numeric values for the --login-type option.

    Good luck with your project!