bionic (8) pkcsslotd.8.gz

NAME

       pkcsslotd - shared memory manager for opencryptoki

DESCRIPTION

       The  pkcsslotd  daemon  manages  PKCS#11  objects  between  PKCS#11-enabled  applications. When 2 or more
       processes are accessing the same cryptographic token, the daemon is notified and updates each application
       when the token's objects change.

NOTES

       Only  one  instance  of  the pkcsslotd daemon should be running on any given host. If a prior instance of
       pkcsslotd did not shut down cleanly, then it may leave an allocated shared memory segment on the  system.
       The  allocated  memory  segment can be identified by its key and can be safely removed once the daemon is
       stopped with the ipcrm command, such as:

       ipcrm -M 0x6202AB38

       The daemon creates the shared memory segment with group ownership by the pkcs11 group. All non-root users
       that  should  be  able  to use openCryptoki need to be members of the group. Only trusted users should be
       assigned to the group, see the "SECURITY NOTE" in the opencryptoki(7) manual page for details.

SEE ALSO

       opencryptoki(7),
       opencryptoki.conf(5),
       pkcsconf(1),