(PowerShell) PKCS11 Set PIN for Currently Logged On User

See more PKCS11 Examples

Demonstrates how to change the PIN for the currently logged on user. (The currently logged on user can be the Security Officer, the Normal User, or Context Specific.)

Note: Requires Chilkat v9.5.0.89 or greater.

Chilkat .NET Downloads Chilkat .NET Assemblies

Add-Type -Path "C:\chilkat\ChilkatDotNet47-9.5.0-x64\ChilkatDotNet47.dll"

# This example requires the Chilkat API to have been previously unlocked.
# See Global Unlock Sample for sample code.

# Note: Chilkat's PKCS11 implementation runs on Windows, Linux, Mac OS X, and other supported operating systems.

$pkcs11 = New-Object Chilkat.Pkcs11

# See PKCS11 Find Driver Library Path for information about how to find the 
# PKCS11 driver file (if not explicitly known) for the plugged-in token or smart card in reader.
$pkcs11.SharedLibPath = "IDPrimePKCS1164.dll"

$success = $pkcs11.Initialize()
if ($success -eq $false) {
    $($pkcs11.LastErrorText)
    exit
}

# Pass -1 for the slotID to open a session on the first non-empty slot.
$slotID = -1

# Open a session.
$readWrite = $true
$success = $pkcs11.OpenSession($slotID,$readWrite)
if ($success -eq $false) {
    $($pkcs11.LastErrorText)
    exit
}

# Make it an authenticated session by calling Login.
# The smart card PIN is passed to the Login method.
# The user type can be one of three choices:
# 0 - Security Officer
# 1 - Normal User
# 2 - Context Specific.
$userType = 1
$pin = "0000"
$success = $pkcs11.Login($userType,$pin)
if ($success -eq $false) {
    $($pkcs11.LastErrorText)
    $success = $pkcs11.CloseSession()
    exit
}

# Change the PIN from 0000 to 1234
# This changes the PIN for the user type that is logged in.
$success = $pkcs11.SetPin($pin,"1234")
if ($success -eq $false) {
    $($pkcs11.LastErrorText)
    $success = $pkcs11.CloseSession()
    exit
}

# Revert to an unauthenticated session by calling Logout.
$success = $pkcs11.Logout()
if ($success -eq $false) {
    $($pkcs11.LastErrorText)
    $success = $pkcs11.CloseSession()
    exit
}

# When finished, close the session.
# It is important to close the session (memory leaks will occur if the session is not properly closed).
$success = $pkcs11.CloseSession()
if ($success -eq $false) {
    $($pkcs11.LastErrorText)
    exit
}

$("Successfully changed PIN from 0000 to 1234")