PKCS #11 maintains information about the library code, slots, and tokens, which can be set and queried by calling the library functions. For z/OS® this information is as follows:

CK_INFO - Returned by C_GetInfo. not modifiable by applications.

• cryptokiVersion - 2.20
• manufacturerID - "IBM® Corp.                      "
• libraryDescription - "z/OS PKCS11 library            "
• libraryVersion - 7.70

CK_SLOT_INFO - Returned by C_GetSlotInfo. not modifiable by applications

• slotDescription - "z/OS PKCS11 - virtual smart card                      "
• manufacturerID - "IBM Corp.                      "
• flags - for any slot returned by C_GetSlotList the following flags are set:
  • CKF_TOKEN_PRESENT=ON
  • CKF_REMOVABLE_DEVICE=ON
  • CKF_HW_SLOT=OFF
• hardwareVersion - 7.70
• firmwareVersion - 7.70

CK_TOKEN_INFO - Set by C_InitToken . Returned by C_GetTokenInfo

• label - As specified
• manufacturerID - "z/OS PKCS11 API                " (Might be set to other values if the token was initialized outside of the C API.)
• model - "HCR7770         " (coincides with the release that the token was created) (Might be set to other values if the token was initialized outside of the C API.)
• serialNumber - "0              " (Might be set to other values if the token was initialized outside of the C API.)
• flags - the following flags are set ON for any initialized token. All others are OFF:
  • CKF_RNG
  • CKF_PROTECTED_AUTHENTICATION_PATH
  • CKF_TOKEN_INITIALIZED
  • CKF_USER_PIN_INITIALIZED
• ulMaxSessionCount - CK_UNAVAILABLE_INFORMATION
• ulSessionCount - CK_UNAVAILABLE_INFORMATION
• ulMaxRwSessionCount - CK_UNAVAILABLE_INFORMATION
• ulRwSessionCount - CK_UNAVAILABLE_INFORMATION
• ulMaxPinLen - CK_UNAVAILABLE_INFORMATION
• ulMinPinLen - 0
• ulTotalPublicMemory - CK_UNAVAILABLE_INFORMATION
• ulFreePublicMemory - CK_UNAVAILABLE_INFORMATION
• ulTotalPrivateMemory - CK_UNAVAILABLE_INFORMATION
• ulFreePrivateMemory - CK_UNAVAILABLE_INFORMATION
• hardwareVersion - 7.70
• firmwareVersion - 7.70
• utcTime - GMT date and time that the token was last updated

CK_SESSION_INFO - Returned by C_GetSessionInfo

• slotId - The slot in question
• state - CK_UNAVAILABLE_INFORMATION
• flags - As defined by the PKCS #11 specification
• ulDeviceError - A mapping of the last failing ICSF return and reason code values related to this session. For more information see Function return codes.