Read the PKCS#11 token PIN from NB_TPM_PIN instead of the profile config

2026-10-11 16:09:07 +02:00 · 2026-10-01 08:16:40 +02:00
parent 0641f0d7bb
commit ab2f8972be
6 changed files with 30 additions and 18 deletions
@@ -846,6 +846,7 @@ func TestAddConfig_AllFieldsCovered(t *testing.T) {
 		"Name":                 "non-config: profile name is not needed for debug purposes",
 		"policy":               "non-config: in-memory MDM policy snapshot, surfaced via Config.Policy() / GetConfigResponse.MDMManagedFields",
 		"DebugBundleUploadURL": "sensitive: MDM-provided upload URL may carry credentials or query tokens; kept out of the shared bundle",
+		"CertPKCS11URI":        "sensitive: the URI may carry the token PIN as pin-value; only whether it is set is rendered",
 	}

 	mURL, _ := url.Parse("https://api.example.com:443")