-
Notifications
You must be signed in to change notification settings - Fork 247
Init with p11tool fails #95
Open
Description
Running
p11tool --initialize
on a new ATECC608a fails with: Error in pkcs11_init:1439: PKCS #11 error.
I provided the sample config. Running list-all shows a additional public key afterwards.
The full commands are those:
test@test:~ $ p11tool --list-all --provider /usr/lib/libcryptoauth.so
Object 0:
URL: pkcs11:model=ATECC608A;manufacturer=Microchip%20Technology%20Inc;serial=9361D65F12F4;token=0123EE;object=device;type=private
Type: Private key (EC/ECDSA)
Label: device
Flags: CKA_PRIVATE; CKA_SENSITIVE;
ID:
test@test:~ $ p11tool --initialize "pkcs11:serial=9361D65F12F4" --label Testing --provider /usr/lib/libcryptoauth.so
Enter Security Officer's PIN:
Initializing token...
Error in pkcs11_init:1439: PKCS #11 error.
test@test:~ $ p11tool --list-all --provider /usr/lib/libcryptoauth.so
Object 0:
URL: pkcs11:model=ATECC608A;manufacturer=Microchip%20Technology%20Inc;serial=9361D65F12F4;token=0123EE;object=device;type=private
Type: Private key (EC/ECDSA-SECP256R1)
Label: device
Flags: CKA_PRIVATE; CKA_SENSITIVE;
ID:
Object 1:
URL: pkcs11:model=ATECC608A;manufacturer=Microchip%20Technology%20Inc;serial=9361D65F12F4;token=0123EE;object=device;type=public
Type: Public key (EC/ECDSA-SECP256R1)
Label: device
ID:
test@test:~ $ p11tool --export-pubkey --provider /usr/lib/libcryptoauth.so "pkcs11:token=0123EE;object=device;type=private"
warning: --login was not specified and it may be required for this operation.
warning: no --outfile was specified and the public key will be printed on screen.
-----BEGIN PUBLIC KEY-----
MFkwEwYHKoZIzj0CAQYIKoZIzj0DAQcDQgAEYKnN1v3MqaDcw88O9peBiMK/QViL
pY9nmaKOrybKE0S7KDpI0Aay/TgTetzJFFxsL69/EUwiFqWhHvk2ab2n+A==
-----END PUBLIC KEY-----
Why isn't this working?