To facilitate easier testing and troubleshooting, it is recommended to enable PKCS#11 logging. This can be done by configuring the Logging Loglevel and LogPath parameters in the configuration file. LogPath should point to a writable directory (not a specific file) where log files can be stored. Logging Loglevel controls the verbosity of the logs:
-
Set it to 1 for basic logging.
-
For detailed testing and debugging, increase the level to 4.
The log file generated will be named cs_pkcs11_R3.log and will be located in the directory specified by LogPath. If any issues arise during testing, reviewing this log file can help identify and resolve them.
Once testing is complete, it is advisable to reduce the Logging Loglevel to 1 or 2 to limit logging to only critical or important messages, thereby optimizing performance and reducing unnecessary log data.