To Configure Solaris Cryptographic

1. Remove the ./sunw directory from your machine using the following command:

   %rm -rf $HOME/.sunw

2. Set a new pin using the following command:

   % pktool setpin Enter new PIN:<type the pin here>

   Re-enter new PIN:<retype the pin again>

3. Disable the mechanisms in the pkcs11_kernel.so and pkcs11_softtoken.so files using the following command:

   #cryptoadm disable provider=/usr/lib/security/$ISA/pkcs11_kernel.so mechanism=CKM_SSL3_PRE_MASTER_KEY_GEN,CKM_SSL3_MASTER_KEY_DERIVE,CKM_SSL3_KEYAND_MAC_DERIVE,CKM_SSL3_MASTER_KEY_DERIVE_DH,CKM_SSL3_MD5_MAC,CKM_SSL3_SHA1_MAC

   #cryptoadm disable provider=/usr/lib/security/$ISA/pkcs11_softtoken.so mechanism=CKM_SSL3_PRE_MASTER_KEY_GEN,CKM_SSL3_MASTER_KEY_DERIVE,CKM_SSL3_KEYAND_MAC_DERIVE,CKM_SSL3_MASTER_KEY_DERIVE_DH,CKM_SSL3_MD5_MAC,CKM_SSL3_SHA1_MAC

   ---

   Note –

   Ensure to disable mechanisms in pkcs11_softtoken_extra.so file, if it is used.

   ---