Command Summary (CLI commands used)

#./p11tool2 slot=<slot#> Label=<TokenLabel> Login=<AdminUser>,<AdminKeyPath> Force=1 InitToken=<SO_PIN>

To Initialize Token with Security Officer PIN

#./csadm dev=<device> Logonpass=SO/USR_<slot#>,<old_PIN> changeuser=SO/USR_<slot#>,<new_PIN>

To Change User or SO PIN

#./p11tool2 slot=<slot#> LoginSO=<SO_PIN> InitPin=<User_PIN>

To Initialize User PIN

#./csadm dev=<device> LogonSign=<AdminUser>,<AdminKeyPath> ListUsers

To List all users details

#./p11tool2 LoginUser=<User_PIN> GetSlotInfo

To Get Slot Information

#./p11tool2 LoginUser=<User_PIN> GetTokenInfo

To Get Token Information

#./csadm dev=<device> LogonSign=<AdminUser>,<AdminKeyPath>
Key=<MBK1_Label>#<User_PIN>,<MBK2_Label>#<User_PIN>
MBKGenerateKey=AES,32,2,2,<Keyname>

To Generate MBK keys

#./csadm dev=<device> LogonSign=<AdminUser>,<AdminKeyPath>
Key=<MBK1_Label>#<User_PIN>,<MBK2_Label>#<User_PIN> MBKImportKey=<slot#>

To Import MBK keys

#./csadm dev=<device> LogonSign=<AdminUser>,<AdminKeyPath> MBKListKeys

To List MBK keys

#<tmsh> create sys crypto key <KeyName> gen-certificate \
common-name <CN> nethsm-partition-name auto security-type NetHSM

To Create Crypto Key and Certificate

#<tmsh> list sys crypto key <KeyName>

To List Crypto Key Details

#<tmsh> save sys config

To Save the Configuration

#./p11tool2 slot=<slot#> LoginUser=<User_PIN>
PubKeyAttr=CKA_LABEL="<Label>",CKA_ID=RSA
PrvKeyAttr=CKA_LABEL="<Label>",CKA_ID=RSA
GenerateKeyPair=RSA

To Generate RSA Key Pair in HSM

#<tmsh>install sys crypto key <KeyName> from-nethsm security-type nethsm

To Install Key from NetHSM