Sun Oracle Crypto Accelerator 6000 Board, User Manual

Page: 169 / 266

Chapter 6 Developing PKCS#11 Applications for Use With the Sun Crypto Accelerator 6000 Board 147
Slot Descriptions
There are four kinds of slots available through the Oracle Solaris PKCS#11 library.
■
Keystore slot
The Keystore slot groups together the multiple hardware providers that share a
common keystore to support availability and load balancing. The Keystore slot
description and the token label for the Sun Crypto Accelerator 6000 board are
made up of the keystore name padded with spaces.
■
Sun Metaslot
The Sun Metaslot uses all of the cryptographic engines on the system, including
the Sun Crypto Accelerator 6000; thus, it provides the maximum functionality. By
default, Sun Metaslot uses the Oracle Solaris Softtoken keystore; however it can
be configured to use the Sun Crypto Accelerator 6000 keystore. See
“Sun
Metaslot” on page 148 .
■
Hardware slot
The Hardware slot is bound to and dedicated to a hardware device. These slots
are directly accessible when the device is uninitialized or when it is in diagnostic
mode. There should be three Hardware slots per Sun Crypto Accelerator 6000
board. These slots are useful for diagnosis because they are directly associated
with a board. The Hardware slot description and the token label for the board are
in the following format:
mca/
N
Crypto Accel 1.0. [CB|CA|OM]
. Where N
is the instance number.
■
Sun Softtoken slot
The Sun Softtoken slot is a software cryptographic provider with an on-disk
keystore.
The following subsections provide details on the Keystore slot, Sun Metaslot, and
Hardware slot.
Keystore Slot
The Keystore slot has the advantage of hardware redundancy and load balancing
when there are more than one Sun Crypto Accelerator 6000 board on the system
with the same keystore. For example, when there are two boards with the same
keystore with the name of
ks
, a slot with the slot description and token label of
ks
is used as the Keystore slot.