All it seems to be doing is adding the PKCS11 library to the secmod.db for the new instance it is creating - something one can do manually even after the instance has been created. You do have to restart the service so the servlet sees the new module in secmod.db, but I don't think it does anything else. Arshad Noor StrongAuth, Inc. P.S. How I miss the old Java installation wizard CS had; it was simple, elegant and allowed for significant configuration in the wizard. You could have an instance of a CA up and running in less than 5 minutes. Between rpm, perl scripts, HTML and servlets, the new installation process appears to have made installation one of the most complex parts of setting up a DogTag PKI. What a pity. Michael StJohns wrote:
On 4/27/2010 10:41 PM, Arshad Noor wrote:
Appreciate everything you're mentioning about this, Mike; can you clarify one last item?
What do you mean by the following statement? Thanks.
Arshad Noor StrongAuth, Inc.
Michael StJohns wrote:
Add utimaco to the pkicreate script in /usr/bin
Find the sections where nFast and Luna are added to the module by pkicreate - add similar language for Utimaco.