Setting Up Crypto Officer PIN

To use PKCS #11 you must set up the Crypto User’s pin. This should have already been completed with the vendor. If needed, below are the steps using the ckdemo utility tool provided with the Luna HSM.

To initialize Crypto Officer’s pin:

  1. Open a command prompt with admin permissions.

  2. Navigate to the SafeNet HSM Client installation Directory

  3. Run the ckdemo.exe

  4. Enter 1 to open session

  5. Enter 3 to login. Once you are logged in: Enter 0 for partition SO, Enter PIN

  6. Enter 7 (Init Pin)

    1. Enter 1 (Crypto Officer)

    2. Enter new user PIN (Crypto Officer)

  7. Enter 4 (Logout)

To change the Expired Crypto Officer’s pin:

  1. Enter 3 (Login)

  2. Enter 1 (Crypto Officer)

  3. Enter PIN (Crypto Officer)

  4. Enter 5 (Change PIN)

    1. Enter old PIN

    2. Enter new PIN

The Crypto Officer’s pin should be ready to use now.