softhsm2.conf man page

softhsm2.conf — SoftHSM configuration file


This is the configuration file for SoftHSM. It can be found on a default location, but can also be relocated by using the environment variable. Any configuration must be done according to the file format found in this document.

File Format

Each configuration option is a pair of name and value separated by a equality sign. The configuration option must be located on a single line.

<name> = <value>

It is also possible to add comments in the file by using the hash sign. Anything after the hash sign will be ignored.

# A comment

Any empty lines or lines that does not have the correct format will be ignored.


The location where SoftHSM can store the tokens.

directories.tokendir = /var/lib/softhsm/tokens/


The backend to use by SoftHSM to store token objects. Either "file" or "db" is supported. In order to use the "db" backend, the SoftHSM build needs to be configured with "configure --with-objectstore-backend-db"

objectstore.backend = file


The log level which can be set to ERROR, WARNING, INFO or DEBUG.

log.level = INFO


If set to true CKF_REMOVABLE_DEVICE is set in the flags returned by C_GetSlotInfo. Default is false.

slots.removable = true


When defined, the value will be used as path to the configuration file.


default user-specific location of the SoftHSM configuration file; if it exists it will override the system wide configuration
default system-wide location of the SoftHSM configuration file
an example of a SoftHSM configuration file


Written by Rickard Bellgrim, Francis Dupont, René Post, and Roland van Rijswijk.

See Also

softhsm2-keyconv(1), softhsm2-migrate(1), softhsm2-util(1)

Referenced By

softhsm2-keyconv(1), softhsm2-migrate(1), softhsm2-util(1).

Explore man page connections for softhsm2.conf(5).

SoftHSM 30 October 2014