Hard Token Management Framework
Search hardtokenmgmt.org for:

Supported Tokens

Supported Tokens and PKCS11

Here follows a list of currently tested tokens and PKCS11

PKCS11 SetWeb

Tested Version: 1.80

Tested Card OS:

  • SecCos 431, InstantEID IP1 formatted : Works, cannot be reformatted, don't support removal of keys, no tests fail.
  • SecCos 441, InstantEID IP2 formatted : Works, cannot be reformatted, supports removal of keys, but tests 5.2 and 5.11 fail.
  • Setec SetCOS 4.4.1, unintialized cards: Works, can be reformatted

Notes: In order for SetWeb PKCS11 to work with multiple PIN must the registry settings HKEY_LOCAL_MACHINE\SOFTWARE\Setec\SetTokI\config\flags be set to 880 and HKEY_LOCAL_MACHINE\SOFTWARE\Setec\SetTokI\config\virtualslotcount to 1.

PKCS11 NetId

Almost fully working, exceptions: doesn't support PUK unlock through PKCS11 so a JNI interface had to be written for this functionality and for now inital initalization needs to be done via https://demo.secmaker.com/demo (only once per card though)