Breadcrumbs

Configuration on Utimaco SecurityServer

  1. Set the environment variable to point to the PKCS#11 configuration file.

›_ Console

# export CS_PKCS11_R3_CFG="/etc/utimaco/cs_pkcs11_R3.cfg"

  1. Create users SO (Security Officer) and USR (the Crypto user) and initialize a slot. This is done using p11tool2. We first create the SO using the InitToken command and change his initial PIN with SetPin command. Then we create the cryptographic user using the InitPin command and change his initial PIN as well.

›_ Console

# cd /opt/utimaco/bin

# ./p11tool2 Slot=<slot_id> Label=<label> Login=<admin_name>,<admin_auth_token> InitToken=<Initial_SO_PIN>

# ./p11tool2 Slot=<slot_id> LoginSO=<Initial_SO_PIN> SetPin=<Initial_SO_PIN>,<SO_PIN>

# ./p11tool2 Slot=<slot_id> LoginSO=<SO_pin> InitPin=<Initial_CryptoUser_PIN>

# ./p11tool2 Slot=<slot_id> Login=<Initial_CryptoUser_PIN> SetPin=<Initial_CryptoUser_PIN>,<CryptoUser_PIN>

  1. Run the csadm ListUsers command to see the created users.

›_ Console

# ./csadm Dev=<HSM_IP> ListUsers


04_SecurityOfficeAndCryptoUserCreated.png


Security officer and cryptographic user created