# Nitrokey 3A NFC and Java Sun PKCS#11

**URL:** https://support.nitrokey.com/t/nitrokey-3a-nfc-and-java-sun-pkcs-11/5916
**Category:** Nitrokeys
**Created:** [February 1, 2024, 7:27pm UTC](https://support.nitrokey.com/t/nitrokey-3a-nfc-and-java-sun-pkcs-11/5916 "2024-02-01T19:27:48Z")
**Posts on this page:** 1
**Showing post:** 2

<div class="post-metadata">

### Author: ![bray](https://support.nitrokey.com/letter_avatar_proxy/v4/letter/b/ea666f/32.png) [@bray](https://support.nitrokey.com/u/bray)
#### Post date: [February 2, 2024, 10:40pm UTC](https://support.nitrokey.com/t/nitrokey-3a-nfc-and-java-sun-pkcs-11/5916/2 "2024-02-02T22:40:09Z")

</div>

On noticing recent post [Nk 3c nfc generating keypair through pkcs tool](https://support.nitrokey.com/t/nk-3c-nfc-generating-keypair-through-pkcs-tool/5909), I tried `pkcs11-tool` for key creation:

```powershell
> pkcs11-tool --login-type so --pin "123456" --keypairgen --key-type "EC:prime256v1" --label "modsign" --usage-sign -v
Using slot 0 with a present token (0x0)
Logging in to "OpenPGP card (User PIN)".
Please enter SO PIN: Key pair generated:
Private Key Object; EC
  label: modsign
  ID: c0b95d24aed8b5ab78bfb83735d324e25ec7ef6a
  Usage: sign, signRecover
  Access: sensitive, always sensitive, never extractable, local
Public Key Object; EC EC_POINT 1020 bits
  EC_POINT: 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
  EC_PARAMS: 06082a8648ce3d030107
  label: modsign
  ID: c0b95d24aed8b5ab78bfb83735d324e25ec7ef6a
  Usage: verify, verifyRecover
  Access: none

> pkcs11-tool --list-objects --login
Using slot 0 with a present token (0x0)
Logging in to "OpenPGP card (User PIN)".
Please enter User PIN: Private Key Object; EC
  label: Authentication key
  ID: 03
  Usage: sign
  Access: sensitive, always sensitive, never extractable, local
Public Key Object; EC EC_POINT 256 bits
  EC_POINT: 044104fa6d46dc252ea7d263ffaf8c9bf2fa96bf24ab541daf0a6c77048b8bbd5088ac3936ff0335ade9ec82da2975a26a5c3ce4390c98f24c689637d92f9d7d6b46c6
  EC_PARAMS: 06082a8648ce3d030107
  label: Authentication key
  ID: 03
  Usage: verify, verifyRecover
  Access: none
Profile object 1480404688
  profile_id: CKP_PUBLIC_CERTIFICATES_TOKEN (4)

```

This was encouraging, but `keytool` still cannot see any keys.

```powershell
> keytool -providerClass sun.security.pkcs11.SunPKCS11 -providerArg .\pkcs11.cfg -list -keystore NONE -storetype PKCS11 -v
Enter keystore password:
Keystore type: PKCS11
Keystore provider: SunPKCS11-Nitrokey3

Your keystore contains 0 entries

```

---

_[View the full topic](https://support.nitrokey.com/t/nitrokey-3a-nfc-and-java-sun-pkcs-11/5916)._