# Nitrokey HSM2 reinit pin with so-pin fail

**URL:** https://support.nitrokey.com/t/nitrokey-hsm2-reinit-pin-with-so-pin-fail/5433
**Category:** HSM
**Created:** [September 19, 2023, 12:14pm UTC](https://support.nitrokey.com/t/nitrokey-hsm2-reinit-pin-with-so-pin-fail/5433 "2023-09-19T12:14:52Z")
**Posts on this page:** 4
**Page:** 1

<div class="post-metadata">

### Author: ![eric.matyasi](https://support.nitrokey.com/letter_avatar_proxy/v4/letter/e/a88e57/32.png) [@eric.matyasi](https://support.nitrokey.com/u/eric.matyasi)
#### Post date: [September 19, 2023, 12:14pm UTC](https://support.nitrokey.com/t/nitrokey-hsm2-reinit-pin-with-so-pin-fail/5433/1 "2023-09-19T12:14:52Z")

</div>

Hello everybody,  
My nitrokey is initialized and used on windows 10 .  
At the begining, i changed the so-pin with a personnal 16 digits so-pin.  
In use, A user has blocked the pin with the three retries.  
If i used sc-hsm\_tool , i have the message “user pin locked”

I try to reinit pin with the command line :  
pkcs11-tool --login --login-type so --so-pin=XXXXXXXXXXXXXXXX --init-pin --new-pin=123456

Using slot 0 with a present token (0x0)  
error: PKCS11 function C\_InitPIN failed: rv = CKR\_PIN\_INCORRECT (0xa0)  
Aborting.

Every test like that decrease le so-pin tries left  
do you have an idea?  
Best regards

---

<div class="post-metadata">

### Author: ![eric.matyasi](https://support.nitrokey.com/letter_avatar_proxy/v4/letter/e/a88e57/32.png) [@eric.matyasi](https://support.nitrokey.com/u/eric.matyasi)
#### Post date: [September 19, 2023, 12:19pm UTC](https://support.nitrokey.com/t/nitrokey-hsm2-reinit-pin-with-so-pin-fail/5433/2 "2023-09-19T12:19:22Z")

</div>

My so-pin is good when i test it with “opencs-explorer” + verify chv136  
if i put the So-pin modified, it’s OK

---

<div class="post-metadata">

### Author: ![sc-hsm](https://support.nitrokey.com/user_avatar/support.nitrokey.com/sc-hsm/32/304_2.png) [@sc-hsm](https://support.nitrokey.com/u/sc-hsm)
#### Post date: [September 19, 2023, 2:06pm UTC](https://support.nitrokey.com/t/nitrokey-hsm2-reinit-pin-with-so-pin-fail/5433/3 "2023-09-19T14:06:36Z")

</div>

Please try unblocking with the Smart Card Shell or sc-hsm-tool.

The verify chv136 will not work, as the SO-PIN can not be verified that way.

If things go really bad and you block the SO-PIN, you can reload the firmware in the PKI-as-a-Service portal.

---

<div class="post-metadata">

### Author: ![eric.matyasi](https://support.nitrokey.com/letter_avatar_proxy/v4/letter/e/a88e57/32.png) [@eric.matyasi](https://support.nitrokey.com/u/eric.matyasi)
#### Post date: [October 3, 2023, 8:43am UTC](https://support.nitrokey.com/t/nitrokey-hsm2-reinit-pin-with-so-pin-fail/5433/4 "2023-10-03T08:43:04Z")

</div>

All is good, thanks a lot
