8.3 Device Initialization Using P11tool

To initialize the device with a basic configuration (known as the standard TLS configuration) using p11tool:

# p11tool --initialize "pkcs11:serial=BF2EE438E462" --label greengrass 
Enter Security Officer's PIN:123
Initializing token... done

Token was successfully initialized; use --initialize-pin and --initialize-so-pin to set or reset PINs

The error in pkcs11_init can be ignored.

The device must be identified in some way to p11tool using the pkcs11 string. In this example, the serial number previously obtained from the p11tool --list-all command is used. The label is a required field but is currently treated as a dummy value, as the library provides the value and it will be a field in the configuration file in the future.