---
title: "Comment by Sayan Pal on \"Installing and configuring Utimaco's SecurityServer Simulator\" | Hashnode"
description: "Hi, thanks for this post! I initially set up the HSM using your write-up. Recently I have upgraded to v4.70.0.0, and I am getting CKR_PIN_TOO_WEAK when I am try"
url: "https://hashnode.com/posts/installing-and-configuring-utimacos-securityserver-simulator/63641f62e8477571135b77fd/comment/663e1fc8254d5eb9ac2fd7f1"
---

[Discussion](https://hashnode.com/posts/installing-and-configuring-utimacos-securityserver-simulator/63641f62e8477571135b77fd)

Comment [Installing and configuring Utimaco's SecurityServer Simulator](https://hashnode.com/posts/installing-and-configuring-utimacos-securityserver-simulator/63641f62e8477571135b77fd)

[Sayan Pal](https://hashnode.com/@sayan751)

[May 10, 2024](https://hashnode.com/posts/installing-and-configuring-utimacos-securityserver-simulator/63641f62e8477571135b77fd/comment/663e1fc8254d5eb9ac2fd7f1)

Hi, thanks for this post! I initially set up the HSM using your write-up. Recently I have upgraded to v4.70.0.0, and I am getting CKR\_PIN\_TOO\_WEAK when I am trying to set user PIN, regardless how complex the PIN is. What is the password policy for User PIN?

[Tim Schindler](https://hashnode.com/@timschindler)

[May 12, 2024](https://hashnode.com/posts/installing-and-configuring-utimacos-securityserver-simulator/63641f62e8477571135b77fd/comment/663e1fc8254d5eb9ac2fd7f1#reply-6640d6959f337bc516c82427)

I don't know the password policy offhand but trying to remember when I did this, I used a complex password instead of a 'traditional' PIN to get around this.

[Sayan Pal](https://hashnode.com/@sayan751)

[May 13, 2024](https://hashnode.com/posts/installing-and-configuring-utimacos-securityserver-simulator/63641f62e8477571135b77fd/comment/663e1fc8254d5eb9ac2fd7f1#reply-6641a07933d11cff4650a082)

[Tim Schindler](https://hashnode.com/@timschindler) Thanks for your reply. I did the same with password and in fact generated >100 characters passwords as well as passphrases. However, none of those helped. I think it might be a bug.

[Sayan Pal](https://hashnode.com/@sayan751)

[May 13, 2024](https://hashnode.com/posts/installing-and-configuring-utimacos-securityserver-simulator/63641f62e8477571135b77fd/comment/663e1fc8254d5eb9ac2fd7f1#reply-6641bf45524aff7b0ecde811)

Now I have the solution. In v4.70 the security regulations are changed. After creating a SO user, the SO user password needs to be changed before the SO user can set a normal user PIN.