Collaborate Disseminate
I have two hardware tokens (Thales/Safenet eToken 5110cc) that both contains certificates for various uses.
I’d like to add only one specific certificate to ssh-agent, however I’m struggling to find the correct PKCS11 URI (described in rfc… Continue reading ssh-agent pkcs11 uri to select certificate
The error I get from pkcs11-tool.exe is "No slots."
My server has a hardware security module (Nitrokey HSM 2) that becomes inaccessible once I connect to my server via Windows Remote Desktop.
Note: this is NOT for logging in with… Continue reading How do I get my server HSM working while connected via RDP? (Win 2019)
I’m new to virtualization and hypervisor environment. Is it possible to use PKCS#11 interface in virtual machines that are managed by a hypervisor such as Xen or similar? This question is that in a hypervisor environment, virtual TPM is wh… Continue reading PKCS#11 interface to work with Virtual TPM
I came across SoftHSM2 from OpenDNSSec(BSD license) which is a drop-in replacement for HSM except that SoftHSM2 only lacks physical security. Also, being the fact that PKCS#11 is the standard interface to work with both SoftHSM2 and HSM/TP… Continue reading Use of SoftHSM2 in commercial products
python-pkcs11 is throwing following error while installing in windows python 3.6
File: C:\Users\xxxx\AppData\Local\Temp\easy_install-g7qs04s2\python-pkcs11-0.5.0\pkcs11\_pkcs11.pyx
tree = Parsing.p_module(s, pxd, full_module_name)
_load… Continue reading python-pkcs11 is not working in windows 10 + python 3.6 [migrated]
Seeking assistance on using PKCS11 with a remote HSM.
I have a small linux host with an HSM card installed. The HSM has libraries and utility scripts provided to interact with it, on that host. These include a pkcs11 utility. What I can… Continue reading pkcs11 with remote HSM
I was testing key generation on a Hardware Security Module and I noticed that it takes so much time to generate an AES 256 secret key on the HSM.
I’ve used pkcs11-tool to generate the key and it took about 5 sec to complete the task:
$ pkc… Continue reading Why does it take so much time to create a secret key on a HSM?
Is there a way to list all keys inside the Utimaco HSM, created by PKCS11 interface and cngtool?
currently, I only can view each of them separately:
PKCS11: using "PKCS#11 CryptoServer Administration" interface.
CNG keys using th… Continue reading List all keys in Utimaco HSM created by PKCS11 and CNG?
I’m trying to sign a CSR using python-asn1crypto and python-pkcs11. I have an ECC Keypair stored in a Hardware Security Module (HSM).
Here’s a code sample:
key = decode_ec_public_key(encode_ec_public_key(pub))
info = CertificationRequestI… Continue reading Signing CSR using an ECC keypair
First off let me say I’m fully aware this question can only be answered by the token vendor but I have already contacted them and with the whole COVID situation my hopes of hearing from them soon are not high (nor that I need to, this is j… Continue reading Cryptoki PKCS11 C_Decrypt returns shorter key (decrypted message) than expected