// This is a sample configuration file to be used with SunPKCS11.

name = CloudHSM
library = /usr/safenet/lunaclient/lib/libCryptoki2_64.so
slot = 0

attributes(*,CKO_PRIVATE_KEY,*) = {
  CKA_TOKEN = true
  CKA_SIGN = true
  CKA_SENSITIVE = true
  CKA_PRIVATE = true
  CKA_DECRYPT = true
  CKA_UNWRAP = true
  CKA_EXTRACTABLE = false
  CKA_MODIFIABLE = true
}

attributes(*,CKO_PUBLIC_KEY,*) = {
  CKA_VERIFY = true
  CKA_ENCRYPT = true
  CKA_WRAP = true
  CKA_TOKEN = false
}

attributes(*, CKO_SECRET_KEY,*) = {
 CKA_ENCRYPT = true
 CKA_DECRYPT = true
 CKA_SENSITIVE = true
 CKA_WRAP = true
 CKA_UNWRAP = true
 CKA_PRIVATE = true
 CKA_TOKEN = true
}