This HTML page is not optimized for LLM or AI agent consumption. Fetch the Markdown version instead: /api/python/signing/pkcs11-options.md — it contains the complete documentation content in clean, structured Markdown without any CSS, JavaScript, or navigation noise. Pkcs11Options

Locates the signing key on a PKCS#11 (Cryptoki) module — a hardware security module, USB token, or smartcard accessed through a vendor driver.

Used when KeySource is Pkcs11. Works on any platform the vendor module supports.

from nutrient_sdk import Pkcs11Options

Construction

Pkcs11Options()

Creates a new Pkcs11Options instance with default settings.

Properties

key_label

@property
def key_label(self) -> str
@key_label.setter
def key_label(self, value: str) -> None

The label of the signing key to use. When empty, the first signing-capable key is used.

Type: str


module_path

@property
def module_path(self) -> str
@module_path.setter
def module_path(self, value: str) -> None

The file path of the vendor PKCS#11 module (for example opensc-pkcs11.dll).

Type: str


pin

@property
def pin(self) -> str
@pin.setter
def pin(self, value: str) -> None

The user PIN used to log in to the token.

Type: str


token_label

@property
def token_label(self) -> str
@token_label.setter
def token_label(self, value: str) -> None

The label of the token to use. When empty, the first token present is used.

Type: str