Using database directory /var/opt/SUNWappserver/domains/domain1/config ...
Listing of PKCS#11 Modules
-----------------------------------------------------------
1. NSS Internal PKCS#11 Module
slots: 2 slots attached
status: loaded
slot: NSS Internal Cryptographic Services
token: NSS Generic Crypto Services
slot: NSS User Private Key and Certificate Services
token: NSS Certificate DB
2. Sun Crypto Accelerator
library name: /opt/SUNWconn/crypto/lib/libpkcs11.so
slots: 1 slot attached
status: loaded
slot: Sun Crypto Accelerator:mytoken
token: mytoken
-----------------------------------------------------------
Managing Keys And Certicates
This section describes a few common procedures for creating and managing keys and
certicates using certutil and pk12util. For details on certutil and pk12util, see “Using
Network Security Services (NSS) Tools” on page 116 and documentation on the NSS Security
Tools site at
http://www.mozilla.org/projects/security/pki/nss/tools .
Note – By conguring a PKCS#11 provider in the java.security properties le (located in the
JAVA_HOME/jre/lib/security directory of the Java runtime), you can also use the J2SE
keytool utility to manage keys and certicates. For details on using keytool, and Java PKCS#11
Reference Guide at
http://java.sun.com/j2se/1.5.0/docs/guide/security/p11guide.html.
This section describes the following topics:
■
“Listing Keys and Certicates ” on page 123
■
“Working With Private Keys and Certicates” on page 124
UsingHardwareCrypto AcceleratorWithEnterpriseServer
SunGlassFishEnterpriseServer2.1AdministrationGuide • December2008122