PowerBuilder
PowerBuilder
PKCS11 Get Token Info
See more PKCS11 Examples
Example showing how to discover the readers (slots) and smart cards and tokens available through a vendor's PKCS11 Cryptoki module, and get token information for each.Chilkat PowerBuilder Downloads
integer li_rc
integer li_Success
oleobject loo_Pkcs11
integer li_OnlyTokensPresent
oleobject loo_Json
integer li_Id
string ls_SlotDescription
integer li_TokenPresent
integer li_RemovableDevice
integer li_HardwareSlot
integer li_HardwareVersionMajor
integer li_HardwareVersionMinor
integer li_FirmwareVersionMajor
integer li_FirmwareVersionMinor
string ls_TokenLabel
string ls_TokenManufacturerID
string ls_TokenModel
string ls_TokenSerialNumber
integer li_TokenMaxSessionCount
integer li_TokenSessionCount
integer li_TokenMaxRwSessionCount
integer li_TokenRwSessionCount
integer li_TokenMaxPinLen
integer li_TokenMinPinLen
integer li_TokenTotalPublicMemory
integer li_TokenFreePublicMemory
integer li_TokenTotalPrivateMemory
integer li_TokenFreePrivateMemory
integer li_TokenHardwareVersionMajor
integer li_TokenHardwareVersionMinor
integer li_TokenFirmwareVersionMajor
integer li_TokenFirmwareVersionMinor
string ls_TokenUtcTime
integer li_TokenRsaMinKeySize
integer li_TokenRsaMaxKeySize
integer j
integer li_Count_j
string ls_StrVal
string ls_TokenFlag
integer li_CryptokiVersionMajor
integer li_CryptokiVersionMinor
string ls_ManufacturerID
string ls_LibraryDescription
integer li_LibraryVersionMajor
integer li_LibraryVersionMinor
integer i
integer li_Count_i
oleobject loo_AFlags
li_Success = 0
// This example requires the Chilkat API to have been previously unlocked.
// See Global Unlock Sample for sample code.
// Note: Chilkat's PKCS11 implementation runs on Windows, Linux, Mac OS X, and other supported operating systems.
loo_Pkcs11 = create oleobject
li_rc = loo_Pkcs11.ConnectToNewObject("Chilkat.Pkcs11")
if li_rc < 0 then
destroy loo_Pkcs11
MessageBox("Error","Connecting to COM object failed")
return
end if
// Specify the vendor's Cryptoki module DLL / shared lib.
// The following PKCS11 driver DLL is for the WatchData ProxKey USB token.
// You would use your smartcard/token vendor's PKCS11 driver DLL.
loo_Pkcs11.SharedLibPath = "SignatureP11.dll"
li_Success = loo_Pkcs11.Initialize()
if li_Success = 0 then
Write-Debug loo_Pkcs11.LastErrorText
destroy loo_Pkcs11
return
end if
// Call Discover to discover what's available.
// Indicate that we only want to return slots (readers) where tokens (or smart cards) are present.
li_OnlyTokensPresent = 1
loo_Json = create oleobject
li_rc = loo_Json.ConnectToNewObject("Chilkat.JsonObject")
li_Success = loo_Pkcs11.Discover(li_OnlyTokensPresent,loo_Json)
if li_Success = 0 then
Write-Debug loo_Pkcs11.LastErrorText
destroy loo_Pkcs11
destroy loo_Json
return
end if
loo_Json.EmitCompact = 0
Write-Debug loo_Json.Emit()
// Sample JSON output.
// Code for parsing this JSON is shown below..
// {
// "cryptokiVersion": {
// "major": 2,
// "minor": 10
// },
// "manufacturerID": "WatchData",
// "libraryDescription": "PKCS#11 cryptoki module",
// "libraryVersion": {
// "major": 3,
// "minor": 10
// },
// "slot": [
// {
// "id": 16385,
// "slotDescription": "Watchdata IC CARD Reader/Writer",
// "manufacturerID": "Watchdata",
// "tokenPresent": true,
// "removableDevice": true,
// "hardwareSlot": true,
// "hardwareVersion": {
// "major": 1,
// "minor": 0
// },
// "firmwareVersion": {
// "major": 1,
// "minor": 0
// },
// "token": {
// "label": "WD PROXKey",
// "manufacturerID": "Watchdata Corp.",
// "model": "TimeCos/PK",
// "serialNumber": "WD05376504",
// "flags": [
// "CKF_RNG",
// "CKF_LOGIN_REQUIRED",
// "CKF_USER_PIN_INITIALIZED",
// "CKF_DUAL_CRYPTO_OPERATIONS",
// "CKF_TOKEN_INITIALIZED"
// ],
// "maxSessionCount": 0,
// "sessionCount": 0,
// "maxRwSessionCount": 0,
// "rwSessionCount": 0,
// "maxPinLen": 32,
// "minPinLen": 6,
// "totalPublicMemory": 61440,
// "freePublicMemory": 70144,
// "totalPrivateMemory": 61440,
// "freePrivateMemory": 70144,
// "hardwareVersion": {
// "major": 2,
// "minor": 1
// },
// "firmwareVersion": {
// "major": 0,
// "minor": 0
// },
// "utcTime": "2024011509254600",
// "mechanism": [
// "CKM_RSA_PKCS_KEY_PAIR_GEN",
// "CKM_EC_KEY_PAIR_GEN",
// "CKM_DES_KEY_GEN",
// "80000001",
// "8000000B",
// "CKM_AES_KEY_GEN",
// "CKM_DES2_KEY_GEN",
// "CKM_DES3_KEY_GEN",
// "CKM_RSA_PKCS",
// "CKM_RSA_X_509",
// "CKM_ECDSA",
// "CKM_ECDSA_SHA1",
// "CKM_MD2_RSA_PKCS",
// "CKM_MD5_RSA_PKCS",
// "CKM_SHA1_RSA_PKCS",
// "CKM_SHA256_RSA_PKCS",
// "CKM_DES_ECB",
// "CKM_DES_CBC",
// "CKM_DES_CBC_PAD",
// "80000002",
// "CKM_CPK_ECDSA",
// "CKM_CPK_ECDSA_SHA1",
// "8000000C",
// "8000000D",
// "8000000E",
// "CKM_AES_ECB",
// "CKM_AES_CBC",
// "CKM_AES_CBC_PAD",
// "CKM_DES3_ECB",
// "CKM_DES3_CBC",
// "CKM_DES3_CBC_PAD",
// "CKM_SHA_1",
// "CKM_SHA_1_HMAC",
// "CKM_SHA_1_HMAC_GENERAL",
// "CKM_SHA256",
// "CKM_SHA256_HMAC",
// "CKM_SHA256_HMAC_GENERAL",
// "CKM_MD2",
// "CKM_MD2_HMAC",
// "CKM_MD2_HMAC_GENERAL",
// "CKM_MD5",
// "CKM_MD5_HMAC",
// "CKM_MD5_HMAC_GENERAL",
// "CKM_SSL3_PRE_MASTER_KEY_GEN",
// "CKM_SSL3_MASTER_KEY_DERIVE",
// "CKM_SSL3_KEY_AND_MAC_DERIVE",
// "CKM_SSL3_MD5_MAC",
// "CKM_SSL3_SHA1_MAC"
// ],
// "rsa": {
// "minKeySize": 1024,
// "maxKeySize": 4096
// }
// }
// }
// ]
// }
// Use this online tool to generate parsing code from sample JSON:
// Generate Parsing Code from JSON
// Use this online tool to generate parsing code from sample JSON:
// Generate Parsing Code from JSON
li_CryptokiVersionMajor = loo_Json.IntOf("cryptokiVersion.major")
li_CryptokiVersionMinor = loo_Json.IntOf("cryptokiVersion.minor")
ls_ManufacturerID = loo_Json.StringOf("manufacturerID")
ls_LibraryDescription = loo_Json.StringOf("libraryDescription")
li_LibraryVersionMajor = loo_Json.IntOf("libraryVersion.major")
li_LibraryVersionMinor = loo_Json.IntOf("libraryVersion.minor")
i = 0
li_Count_i = loo_Json.SizeOfArray("slot")
do while i < li_Count_i
loo_Json.I = i
li_Id = loo_Json.IntOf("slot[i].id")
ls_SlotDescription = loo_Json.StringOf("slot[i].slotDescription")
ls_ManufacturerID = loo_Json.StringOf("slot[i].manufacturerID")
li_TokenPresent = loo_Json.BoolOf("slot[i].tokenPresent")
li_RemovableDevice = loo_Json.BoolOf("slot[i].removableDevice")
li_HardwareSlot = loo_Json.BoolOf("slot[i].hardwareSlot")
li_HardwareVersionMajor = loo_Json.IntOf("slot[i].hardwareVersion.major")
li_HardwareVersionMinor = loo_Json.IntOf("slot[i].hardwareVersion.minor")
li_FirmwareVersionMajor = loo_Json.IntOf("slot[i].firmwareVersion.major")
li_FirmwareVersionMinor = loo_Json.IntOf("slot[i].firmwareVersion.minor")
ls_TokenLabel = loo_Json.StringOf("slot[i].token.label")
ls_TokenManufacturerID = loo_Json.StringOf("slot[i].token.manufacturerID")
ls_TokenModel = loo_Json.StringOf("slot[i].token.model")
ls_TokenSerialNumber = loo_Json.StringOf("slot[i].token.serialNumber")
li_TokenMaxSessionCount = loo_Json.IntOf("slot[i].token.maxSessionCount")
li_TokenSessionCount = loo_Json.IntOf("slot[i].token.sessionCount")
li_TokenMaxRwSessionCount = loo_Json.IntOf("slot[i].token.maxRwSessionCount")
li_TokenRwSessionCount = loo_Json.IntOf("slot[i].token.rwSessionCount")
li_TokenMaxPinLen = loo_Json.IntOf("slot[i].token.maxPinLen")
li_TokenMinPinLen = loo_Json.IntOf("slot[i].token.minPinLen")
li_TokenTotalPublicMemory = loo_Json.IntOf("slot[i].token.totalPublicMemory")
li_TokenFreePublicMemory = loo_Json.IntOf("slot[i].token.freePublicMemory")
li_TokenTotalPrivateMemory = loo_Json.IntOf("slot[i].token.totalPrivateMemory")
li_TokenFreePrivateMemory = loo_Json.IntOf("slot[i].token.freePrivateMemory")
li_TokenHardwareVersionMajor = loo_Json.IntOf("slot[i].token.hardwareVersion.major")
li_TokenHardwareVersionMinor = loo_Json.IntOf("slot[i].token.hardwareVersion.minor")
li_TokenFirmwareVersionMajor = loo_Json.IntOf("slot[i].token.firmwareVersion.major")
li_TokenFirmwareVersionMinor = loo_Json.IntOf("slot[i].token.firmwareVersion.minor")
ls_TokenUtcTime = loo_Json.StringOf("slot[i].token.utcTime")
li_TokenRsaMinKeySize = loo_Json.IntOf("slot[i].token.rsa.minKeySize")
li_TokenRsaMaxKeySize = loo_Json.IntOf("slot[i].token.rsa.maxKeySize")
// The following token flag strings are possible:
// CKF_RNG: has random # generator
// CKF_WRITE_PROTECTED: token is write-protected
// CKF_LOGIN_REQUIRED:user must login
// CKF_USER_PIN_INITIALIZED:normal user's PIN is set
// CKF_RESTORE_KEY_NOT_NEEDED: Every time the state of cryptographic operations of a session is
// successfully saved, all keys needed to continue those operations are stored in the state
// CKF_CLOCK_ON_TOKEN: The token has some sort of clock. The time on the clock is returned in the slot[i].token.utcTime
// CKF_PROTECTED_AUTHENTICATION_PATH: There is some way for the user to login without sending a PIN through the Cryptoki library itself
// CKF_DUAL_CRYPTO_OPERATIONS: A single session with the token can perform dual simultaneous cryptographic operations
// (digest and encrypt; decrypt and digest; sign and encrypt; and decrypt and sign)
// CKF_TOKEN_INITIALIZED: The token has been initialized.
// CKF_SECONDARY_AUTHENTICATION: The token supports secondary authentication for private key objects.
// CKF_USER_PIN_COUNT_LOW: An incorrect user login PIN has been entered at least once since the last successful authentication.
// CKF_USER_PIN_FINAL_TRY: Supplying an incorrect user PIN will it to become locked.
// CKF_USER_PIN_LOCKED: The user PIN has been locked. User login to the token is not possible.
// CKF_USER_PIN_TO_BE_CHANGED: The user PIN value is the default value set by token initialization or manufacturing,
// or the PIN has been expired by the card.
// CKF_SO_PIN_COUNT_LOW: An incorrect SO login PIN has been entered at least once since the last successful authentication.
// CKF_SO_PIN_FINAL_TRY: Supplying an incorrect SO PIN will it to become locked.
// CKF_SO_PIN_LOCKED: The SO PIN has been locked. SO login to the token is not possible.
// CKF_SO_PIN_TO_BE_CHANGED: The SO PIN value is the default value set by token initialization or manufacturing,
// or the PIN has been expired by the card.
// To see if particular flags are present:
loo_AFlags = loo_Json.ArrayOf("slot[i].token.flags")
if loo_AFlags.FindString("CKF_USER_PIN_LOCKED",1) >= 0 then
Write-Debug "The token is locked."
end if
if loo_AFlags.FindString("CKF_RNG",1) >= 0 then
Write-Debug "The token has a random number generator."
end if
// ...
destroy loo_AFlags
// To iterate over all flags..
j = 0
li_Count_j = loo_Json.SizeOfArray("slot[i].token.flags")
do while j < li_Count_j
loo_Json.J = j
ls_TokenFlag = loo_Json.StringOf("slot[i].token.flags[j]")
j = j + 1
loop
j = 0
li_Count_j = loo_Json.SizeOfArray("slot[i].token.mechanism")
do while j < li_Count_j
loo_Json.J = j
ls_StrVal = loo_Json.StringOf("slot[i].token.mechanism[j]")
j = j + 1
loop
i = i + 1
loop
destroy loo_Pkcs11
destroy loo_Json