Hi all,

I just installed Solaris 11 11/11 x86 from the "text-installer" media downloaded from Oracle. I'm trying to setup a pkcs11 keystore with pktool's setpin but haven't been successful. After issuing the command:

$ pktool setpin keystore=pkcs11

I got requests for the current passphrase, the new passphrase and confirmation of the new passphrase. At the end, however, I receive the message "Unable to change passphrase":

$ pktool setpin keystore=pkcs11
Enter token passphrase: <hit-enter>
Create new passphrase: <some passphrase>
Re-enter new passphrase: <same passphrase>
Unable to change passphrase.

I had searched google, read the manual, etc. but can't find an answer on why this is not working. There is very little information on the internet about this problem. Help is greatly appreciated.

Thanks!

Blai

Problem solved. The default password for keystore pkcs11 is "changeme" instead of <blank>. The manual says that the default password is <blank> (How to Generate a Passphrase by Using the pktool*setpin Command (System Administration Guide: Security Services)) but don't specify for which keystore.

Cheers,

Blai