The following steps initialize a PKCS#11 slot for use by ZetaCA. This procedure creates the Security Officer (SO) and Crypto User (USER) on the HSM.
Create users SO (Security Officer) and USR (the Crypto user) and initialize a slot.
The slot must be initialized using the p11tool2.
First, create the SO using p11tool2. Then, using the p11tool2 command, initialize the Slot you want to use and the slot user, as shown below.
# ./p11tool2 slot=<slot no.> Label=<token label> Login=ADMIN,ADMIN.key InitToken=<SO pin>
Initialize the SO user.
# ./p11tool2 slot=<slot no.> LoginSO=<SO pin> InitPin=<Cryptouser pin>
Important: On Utimaco SecurityServer 6.x, the C_SetPIN step is mandatory after creating each user. HMAC password credentials must be activated via C_SetPIN before the user can perform authenticated operations.
Step 1: Authenticate as CryptoServer Administrator.
Open a PKCS#11 session and authenticate using the CKU_CS_GENERIC login type with the ADMIN key file. This is a Utimaco vendor-specific extension (defined in pkcs11t_cs.h as CKU_CS_GENERIC = 0x83).