PureBasic

PKCS11 Set PIN for Currently Logged On User

See more PKCS11 Examples

Demonstrates how to change the PIN for the currently logged on user. (The currently logged on user can be the Security Officer, the Normal User, or Context Specific.)

Note: Requires Chilkat v9.5.0.89 or greater.

PureBasic

IncludeFile "CkPkcs11.pb"

Procedure ChilkatExample()

    success.i = 0

    ; This example requires the Chilkat API to have been previously unlocked.
    ; See Global Unlock Sample for sample code.

    ; Note: Chilkat's PKCS11 implementation runs on Windows, Linux, Mac OS X, and other supported operating systems.

    pkcs11.i = CkPkcs11::ckCreate()
    If pkcs11.i = 0
        Debug "Failed to create object."
        ProcedureReturn
    EndIf

    ; See PKCS11 Find Driver Library Path for information about how to find the 
    ; PKCS11 driver file (if not explicitly known) for the plugged-in token or smart card in reader.
    CkPkcs11::setCkSharedLibPath(pkcs11, "IDPrimePKCS1164.dll")

    success = CkPkcs11::ckInitialize(pkcs11)
    If success = 0
        Debug CkPkcs11::ckLastErrorText(pkcs11)
        CkPkcs11::ckDispose(pkcs11)
        ProcedureReturn
    EndIf

    ; Pass -1 for the slotID to open a session on the first non-empty slot.
    slotID.i = -1

    ; Open a session.
    readWrite.i = 1
    success = CkPkcs11::ckOpenSession(pkcs11,slotID,readWrite)
    If success = 0
        Debug CkPkcs11::ckLastErrorText(pkcs11)
        CkPkcs11::ckDispose(pkcs11)
        ProcedureReturn
    EndIf

    ; Make it an authenticated session by calling Login.
    ; The smart card PIN is passed to the Login method.
    ; The user type can be one of three choices:
    ; 0 - Security Officer
    ; 1 - Normal User
    ; 2 - Context Specific.
    userType.i = 1
    pin.s = "0000"
    success = CkPkcs11::ckLogin(pkcs11,userType,pin)
    If success = 0
        Debug CkPkcs11::ckLastErrorText(pkcs11)
        success = CkPkcs11::ckCloseSession(pkcs11)
        CkPkcs11::ckDispose(pkcs11)
        ProcedureReturn
    EndIf

    ; Change the PIN from 0000 to 1234
    ; This changes the PIN for the user type that is logged in.
    success = CkPkcs11::ckSetPin(pkcs11,pin,"1234")
    If success = 0
        Debug CkPkcs11::ckLastErrorText(pkcs11)
        success = CkPkcs11::ckCloseSession(pkcs11)
        CkPkcs11::ckDispose(pkcs11)
        ProcedureReturn
    EndIf

    ; Revert to an unauthenticated session by calling Logout.
    success = CkPkcs11::ckLogout(pkcs11)
    If success = 0
        Debug CkPkcs11::ckLastErrorText(pkcs11)
        success = CkPkcs11::ckCloseSession(pkcs11)
        CkPkcs11::ckDispose(pkcs11)
        ProcedureReturn
    EndIf

    ; When finished, close the session.
    ; It is important to close the session (memory leaks will occur if the session is not properly closed).
    success = CkPkcs11::ckCloseSession(pkcs11)
    If success = 0
        Debug CkPkcs11::ckLastErrorText(pkcs11)
        CkPkcs11::ckDispose(pkcs11)
        ProcedureReturn
    EndIf

    Debug "Successfully changed PIN from 0000 to 1234"


    CkPkcs11::ckDispose(pkcs11)


    ProcedureReturn
EndProcedure