Storage objects
Common storage object attributes
| Attribute | Data Type | Meaning |
|---|---|---|
CKA_TOKEN |
CK_BBOOL |
TRUE if object is a token object. FALSE if object is a session object. Default is FALSE. |
CKA_PRIVATE |
CK_BBOOL |
TRUE if object is a private object. FALSE if object is a public object. Default value is token-specific, and may depend on the values of other attributes of the object. |
CKA_MODIFIABLE |
CK_BBOOL |
TRUE if object can be modified. FALSE if object can not be modified. Default is TRUE. |
CKA_LABEL |
RFC2279 string | Description of the object. Default is empty. |
Only the CKA_LABEL attribute can be modified after the object is created. The CKA_TOKEN, CKA_PRIVATE, and CKA_MODIFIABLE attributes can be changed in the process of copying an object.
The CKA_TOKEN attribute identifies whether the object is a token object or a session object.
When the CKA_PRIVATE attribute is TRUE, a user cannot access the object until the user has been authenticated to the token.
The value of the CKA_MODIFIABLE attribute determines whether or not an object is read-only.
ProtectToolkit-C unmodifiable objects can be deleted. Objects may, however, specify CKA_DELETABLE to FALSE, for token objects only, in which case the object cannot be deleted using the C_DestroyObject function. Only by re-initializing the token can the object be destroyed.
The CKA_LABEL attribute is intended to assist users in browsing.
