CA ArcotID PKI Client Reference Guide › ArcotID PKI As a Software Smartcard › Support for Open Standards › PKCS#11 Module

PKCS#11 Module

The ArcotPK11.dll library file available in the <%SYSTEMDRIVE%>:\WINDOWS\system32 folder provides the Arcot PKCS#11 functionality. This file is recognized by most applications that support PKCS#11 modules. For example, Mozilla Firefox, Adobe Reader, and Adobe Acrobat.

The Arcot PKCS#11 module conforms to PKCS#11 version 2.01. The Arcot PKCS#11 module does not support all PKCS#11 API functions. Below is the list of PKCS#11 functions that are supported by the Arcot module:

• C_Initialize
• C_Finalize
• C_GetInfo
• C_GetFunctionList
• C_GetSlotList
• C_GetSlotInfo
• C_GetMechanismList
• C_GetTokenInfo
• C_GetMechanismInfo
• C_OpenSession
• C_CloseSession
• C_CloseAllSessions
• C_GetSessionInfo
• C_Login
• C_Logout
• C_CreateObject
• C_GetAttributeValue
• C_SetAttributeValue
• C_FindObjectsInit
• C_FindObjects
• C_FindObjectsFinal
• C_DecryptInit
• C_Decrypt
• C_SignInit
• C_Sign
• C_Verify
• C_VerifyInit
• C_GenerateKey
• C_GenerateKeyPair

The following PKCS#11 functions are not supported by the Arcot module:

• C_InitToken
• C_InitPIN
• C_SetPIN
• C_GetOperationState
• C_SetOperationState
• C_CopyObject
• C_DestroyObject
• C_GetObjectSize
• C_EncryptInit
• C_Encrypt
• C_EncryptUpdate
• C_EncryptFinal
• C_DecryptUpdate
• C_DecryptFinal
• C_DigestInit
• C_Digest
• C_DigestUpdate
• C_DigestKey
• C_DigestFinal
• C_SignUpdate
• C_SignFinal
• C_SignRecoverInit
• C_SignRecover
• C_VerifyFinal
• C_VerifyUpdate
• C_VerifyRecoverInit
• C_VerifyRecover
• C_DigestEncryptUpdate
• C_DecryptDigestUpdate
• C_SignEncryptUpdate
• C_DecryptVerifyUpdate
• C_WrapKey
• C_UnwrapKey
• C_DeriveKey
• C_SeedRandom
• C_GenerateRandom
• C_GetFunctionStatus
• C_CancelFunction
• C_WaitForSlotEvent

Arcot has defined vendor-specific codes as permitted in the PKCS#11 standard. These codes are used in the Arcot PKCS#11 module.