Sayan Pal

May 10, 2024

Hi, thanks for this post! I initially set up the HSM using your write-up. Recently I have upgraded to v4.70.0.0, and I am getting CKR_PIN_TOO_WEAK when I am trying to set user PIN, regardless how complex the PIN is. What is the password policy for User PIN?

TS

Tim Schindler

CyberArk MVP, Guardian | Managing Consultant at CyberIAM

May 12, 2024

I don't know the password policy offhand but trying to remember when I did this, I used a complex password instead of a 'traditional' PIN to get around this.

SP

Sayan Pal

May 13, 2024

Tim Schindler Thanks for your reply. I did the same with password and in fact generated >100 characters passwords as well as passphrases. However, none of those helped. I think it might be a bug.

SP

Sayan Pal

May 13, 2024

Now I have the solution. In v4.70 the security regulations are changed. After creating a SO user, the SO user password needs to be changed before the SO user can set a normal user PIN.

Search Hashnode