# Pkcs11-tool

<div id="bkmrk-install-pkcs11-tool"><div><div>Install pkcs11-tool</div></div></div>```
apt install opensc
```

<div id="bkmrk-get-hsm-info"><div><div>Get hsm info</div></div></div>```
pkcs11-tool --module /opt/nfast/toolkits/pkcs11/libcknfast.so --show-info
```

<div id="bkmrk-list-available-slots"><div><div>List available slots</div></div></div>```
pkcs11-tool --module /opt/nfast/toolkits/pkcs11/libcknfast.so --list-slots
```

<div id="bkmrk-list-objects-on-spec"><div><div>List objects on specified slot</div></div></div>```
pkcs11-tool --module /opt/nfast/toolkits/pkcs11/libcknfast.so --list-objects --slot 0x1f655491
```

<div id="bkmrk-list-certificates-on">List certificates on specified slot</div>```
pkcs11-tool --module /opt/nfast/toolkits/pkcs11/libcknfast.so --list-objects --slot 0x1f655491 --type cert
```

<div id="bkmrk-export-public-key">Export public key</div>```
pkcs11-tool --module /usr/lib/libcs_pkcs11_R2.so --login --slot 3 --read-object --type pubkey --id <id> --output-file slot3_pub.key
```

<div id="bkmrk-export-certificate%28n">Export certificate(needs partitiob/slot password)</div>```
pkcs11-tool --module /opt/nfast/toolkits/pkcs11/libcknfast.so --login --slot 0x1f55492 --read-object --type cert --id <id> --output-file cert.der
```

<div id="bkmrk-"><div>  
</div></div><div id="bkmrk--1">  
</div><div id="bkmrk-thales-other">Thales-Other</div>```
pkcs11-tool --module /usr/lib/libCryptoki2_64.so --list-slots
pkcs11-tool --module /usr/lib/libCryptoki2_64.so --list-objects --login --login-type user --token-label <label>
pkcs11-tool --module /usr/lib/libCryptoki2_64.so --list-objects -r --type cert -l --login-type user --token-label <label>
```