CAT offers the ability to change the PIN that protects an administrator smart card's credential. This should be done after generating a new key on a smart card or as a standard process of a company's security policy for HSM administrators. This operation has no effect on the HSM itself, and thus does not require administrators to login to CAT.
-
Make sure you have your smart card reader configured properly for operations with CAT (see Setting Up the Smart Card Reader).
-
From CAT, select Authentication Token → Smartcard. In the Smartcard Token Management window, select the Change PIN tab.
-
Click Change PIN. The administrator of the smart card must follow the prompts on the smart card reader to complete the PIN change. If the PIN has not been changed before, each smart card will be protected by a default PIN of 123456. Once the administrator has run through the prompts on the smart card reader successfully, the PIN will be changed.
 NOTE: If incorrect PINs are entered three times consecutively, the smart card will trigger a security protocol and be permanently disabled. |