---
name: "pam_pkcs11"
section: "8"
platform: "linux"
package: "libpam-pkcs11"
version: "0.6.13-1"
release: "Debian 13 (Trixie)"
platforms: ["linux"]
url: "https://new.carta.tech/pam_pkcs11"
---

# pam\_pkcs11(8)

PAM Authentication Module for PKCS#11 token libraries

## NAME

pam\_pkcs11 - PAM Authentication Module for PKCS#11 token libraries

## SYNOPSIS

**pam\_pkcs11.so** \[**debug**\] \[**configfile=***\<configfile\>*\]

## DESCRIPTION

This Linux-PAM login module allows a X.509 certificate based user login. The certificate and its dedicated private key are thereby accessed by means of an appropriate PKCS #11 module. For the verification of the users' certificates, locally stored CA certificates as well as either online or locally accessible CRLs are used.

## CONFIGURATION

The program that needs a PAM service should be configured in  */etc/pam.conf* or */etc/pam.d/\<servicename\>*.

**pam\_pkcs11** can be used in the \<auth\> PAM chain.

For details on how to configure PAM services, see the PAM documentation for your system. This manual does not cover PAM configuration details. The existing PAM service definitions for other applications on your system is also a good source for examples on how to configure a PAM service.

## FILES

*/etc/pam\_pkcs11/pam\_pkcs11.conf*\
 */usr/lib/pam\_pkcs11/\*\_mapper.so*

## AUTHOR

Original PAM-pkcs11 was written by Mario Strasser \<mast@gmx.net\>. Newer versions are from Juan Antonio Martinez \<jonsito@teleline.es\>.

## REPORTING BUGS

Report bugs ideas, comments, bug-fixes and so to: *Juan Antonio Martinez \<jonsito@teleline.es\>*

## SEE ALSO

[**pam**(8)](/pam/8.md), **pam\_pkcs11.conf**(5), PAM Systems Administrator Guide, *README.mappers* file, PAM-PKCS#11 User Manual.