Rishi Renjith wrote:
> Hello,
> I have a hardware accelerator installed in my Solaris 10 x86 machine and
> would like to disable the Sun PKCS11 softtoken.
Firstly, could you elaborate on why you're trying to disable it ?
<snip>
> *bash-3.00# cryptoadm disable
> provider="/usr/lib/security/$ISA/pkcs11_softtoken_*
> *extra.so"
This is Solaris 10 system (because of the _extra.so library) but I will
answer this anyway since it is a generic question/issue.
> mechanism=CKM_RSA_PKCS,CKM_RSA_PKCS_KEY_PAIR_GEN,CKM_RSA_X_509,CKM_MD*
> *5_RSA_PKCS*
> *cryptoadm: /usr/lib/security//pkcs11_softtoken_extra.so does not exist.\*
Aah, you mean disable softtoken only for certain mechanisms.
The shell interprets the dollar sign, so you have to escape it like this:
cryptoadm disable \
provider=/usr/lib/security/\$ISA/pkcs11_softtoken_extra.so \
mechanism=CKM_RSA_PKCS,CKM_RSA_PKCS_KEY_PAIR_GEN,CKM_RSA_X_509,CKM_MD5_RSA_PKCS
v.
