Why Change User and SO Pins?

Changing your User and SO pins is an essential practice to ensure the security of your cryptographic storage. It helps safeguard your sensitive data and maintain the integrity of your system.

Changing the SO Pin

The SO pin, or Security Officer pin, is the master pin that provides access to all functions within the SoftHSM. To change it, follow these steps:

• Open your terminal and run the following command:

pkcs11-tool –module /usr/lib64/pkcs11/libsofthsm2.so –login –login-type so –change-pin

Make sure to replace --module with the actual path to libsofthsm2.so.

Changing the User Pin

The User pin is specific to individual users and provides access to their cryptographic storage. To change it, use the following command:

• In your terminal, enter the following command:

pkcs11-tool –module /usr/lib64/pkcs11/libsofthsm2.so –login –login-type user –change-pin

replace --module with the correct path to libsofthsm2.so.

Using a Different Slot

In some cases, you might need to work with a different slot. To specify a different slot, you can use the --slot option followed by the slot number. For example:

pkcs11-tool –module /usr/lib64/pkcs11/libsofthsm2.so –login –login-type so –change-pin –slot 1