How to initialize TEE_BASED_TOKEN in lx2160-ardb

[liziyi]

hi.

We are using lx2160A-RDB rev1, and we got the same issue with

https://community.nxp.com/t5/QorIQ/how-to-generate-x-509-certificate-using-PKCS11-HSM-sobj-app/m-p/1...

The solution of the link above mention that I should initialize the token

It seems that to initialize the token, we have to input the original SO PIN.

We could not find the SO PIN in the manual, how can I initialize this token?

best regards.

[yipingwang]

You are using the option as “—initialize-so-pin” for the token, you must do the token initialization first with “–initialize” first, in which you can set SO PIN yourself as shown in the picture attached.

[yipingwang]

The PKCS#11 library release is compliant to v2.40. It is targeted for LS1046ARDB. Not LX2160A.
I will check with SW team on any issue or patch needed to run on LX2160A.

[liziyi]

Thanks!

I didn't realize I use the wrong p11tool command until now, instead I took some time find out how to init the token use pkcs11-tool from the opensc package.

[liziyi]

And I am also wondering is there any way to import a certificate or RSA public key to this token?

Thanks.