(Delphi DLL) PKCS11 Login / Logout

See more PKCS11 Examples

Sample code showing how to login and logout of a PKCS11 session. A session becomes authenticated when Login is called, and returns to the unauthenticated state when Logout is called. A smart card's PIN is passed to the Login method.

Note: This example requires Chilkat v9.5.0.88 or later.

Chilkat for Delphi Downloads Chilkat non-ActiveX DLL for Delphi Chilkat ActiveX DLL for Delphi * The examples here use the non-ActiveX DLL.

uses
    Winapi.Windows, Winapi.Messages, System.SysUtils, System.Variants, System.Classes, Vcl.Graphics,
    Vcl.Controls, Vcl.Forms, Vcl.Dialogs, Vcl.StdCtrls, Pkcs11, JsonObject;

...

procedure TForm1.Button1Click(Sender: TObject);
var
pkcs11: HCkPkcs11;
success: Boolean;
onlyTokensPresent: Boolean;
json: HCkJsonObject;
slotID: Integer;
readWrite: Boolean;
userType: Integer;
pin: PWideChar;

begin
// This example requires the Chilkat API to have been previously unlocked.
// See Global Unlock Sample for sample code.

// Note: Chilkat's PKCS11 implementation runs on Windows, Linux, Mac OS X, and other supported operating systems.

pkcs11 := CkPkcs11_Create();

// "aetpkss1.dll" is the DLL for the SafeSign Identity Client Standard Version 3.5
// The aetpkss1.dll can be used with the following smart cards or USB tokens:
// Defensiepas
// Defensiepas 2
// G&D Convego Join 4.01 40k/80k
// G&D SkySIM Hercules
// G&D SkySIM Scorpius
// G&D Sm@rtCaf Expert 3.2
// G&D Sm@rtCaf Expert 4.0
// G&D Sm@rtCaf Expert 5.0
// G&D Sm@rtCaf Expert 6.0
// G&D Sm@rtCaf Expert 7.0
// G&D Sm@rtCaf Expert 64
// Gemalto Desineo ICP D72 FXR1 Java
// Gemalto IDCore 30
// Gemalto MultiApp ID v2.1
// Gemalto Optelio D72 FR1
// Gemalto TOP DL v2
// Infineon Oracle JCOS Ed.1
// JCOP21 v2.3
// Morpho IDealCitiz v2.1
// Morpho JMV ProCL V3.0
// NXP J2A080 / J2A081 (JCOP 2.4.1 R3)
// NXP JD081 (JCOP 2.4.1 R3)
// NXP J3A080 (JCOP 2.4.1 R3)
// NXP JCOP 2.4.2 R3
// NXP JCOP 3 SecID P60
// Oberthur IDOne Cosmo v7.0
// RDW ABR kaart
// Rijkspas
// Rijkspas 2
// Sagem YpsID s2
// Sagem YpsID s3
// StarSign Crypto USB Token S
// Swissbit PS-100u SE
// UZI-pas
// UZI-pas 2
CkPkcs11_putSharedLibPath(pkcs11,'aetpkss1.dll');

success := CkPkcs11_Initialize(pkcs11);
if (success = False) then
  begin
    Memo1.Lines.Add(CkPkcs11__lastErrorText(pkcs11));
    Exit;
  end;

// We need to call Discover to get the slot ID.
onlyTokensPresent := True;
json := CkJsonObject_Create();
success := CkPkcs11_Discover(pkcs11,onlyTokensPresent,json);
if (success = False) then
  begin
    Memo1.Lines.Add(CkPkcs11__lastErrorText(pkcs11));
    Exit;
  end;

CkJsonObject_putEmitCompact(json,False);
Memo1.Lines.Add(CkJsonObject__emit(json));

// Make sure we have at least one slot.
if (CkJsonObject_SizeOfArray(json,'slot') <= 0) then
  begin
    Memo1.Lines.Add('No occuplied slots.');
    Exit;
  end;

// Get the ID of the 1st slot
slotID := CkJsonObject_IntOf(json,'slot[0].id');

// Open a session.
readWrite := True;
success := CkPkcs11_OpenSession(pkcs11,slotID,readWrite);
if (success = False) then
  begin
    Memo1.Lines.Add(CkPkcs11__lastErrorText(pkcs11));
    Exit;
  end;

// Make it an authenticated session by calling Login.
// The smart card PIN is passed to the Login method.
// The user type can be one of three choices:
// 0 - Security Officer
// 1 - Normal User
// 2 - Context Specific.
// You'll likely always login as the Normal User.
userType := 1;
pin := '0000';
success := CkPkcs11_Login(pkcs11,userType,pin);
if (success = False) then
  begin
    Memo1.Lines.Add(CkPkcs11__lastErrorText(pkcs11));
    success := CkPkcs11_CloseSession(pkcs11);
    Exit;
  end;

// Do what is needed with the authenticated session...
// ...
// ...

// Revert to an unauthenticated session by calling Logout.
success := CkPkcs11_Logout(pkcs11);
if (success = False) then
  begin
    Memo1.Lines.Add(CkPkcs11__lastErrorText(pkcs11));
    success := CkPkcs11_CloseSession(pkcs11);
    Exit;
  end;

// When finished, close the session.
// It is important to close the session (memory leaks will occur if the session is not properly closed).
success := CkPkcs11_CloseSession(pkcs11);
if (success = False) then
  begin
    Memo1.Lines.Add(CkPkcs11__lastErrorText(pkcs11));
    Exit;
  end;

Memo1.Lines.Add('PKCS11 Login and Logout successfully demonstrated.');

CkPkcs11_Dispose(pkcs11);
CkJsonObject_Dispose(json);

end;