Is the NitroKeyHSM locked based on output below?
- pkcs15-tool --list-pins : Reports available tries left
- sc-hsm-tool : Reports both SO-PIN and User Pin Locked
What command can I use to definitively determine the locked state?
#pkcs15-tool --list-pins
Using reader with a card: Nitrokey Nitrokey HSM (010000000000000000000000) 00 00
PIN [UserPIN]
Object Flags : [0x03], private, modifiable
Auth ID : 02
ID : 01
Flags : [0x812], local, initialized, exchangeRefData
Length : min_len:6, max_len:15, stored_len:0
Pad char : 0x00
Reference : 129 (0x81)
Type : ascii-numeric
Path : e82b0601040181c31f0201::
Tries left : 3
PIN [SOPIN]
Object Flags : [0x01], private
ID : 02
Flags : [0x9A], local, unblock-disabled, initialized, soPin
Length : min_len:16, max_len:16, stored_len:0
Pad char : 0x00
Reference : 136 (0x88)
Type : bcd
Path : e82b0601040181c31f0201::
Tries left : 15
# sc-hsm-tool
Using reader with a card: Nitrokey Nitrokey HSM (010000000000000000000000) 00 00
Version : 2.6
Config options :
User PIN reset with SO-PIN enabled
SO-PIN locked
User PIN locked