PKCS#11
|
| Cryptographic Token Interface Standard |
PKCS#11 |
The application causes the device to change the secondary authentication PIN on a private key using the C_SetAttributeValue function. The template to the function should contain the CKA_SECONDARY_AUTH attribute. The value of CKA_SECONDARY_AUTH in the template does not matter.
When the Cryptoki implementation finds this attribute in a C_SetAttributeValue template, it causes the device to gather the appropriate values. If C_SetAttributeValue is successful, the PIN has been changed to the new value. See sections 10.9 and 11.7 for more information about private key objects and C_SetAttributeValue respectively.