# Help! CKR\_PIN\_INCORRECT

**URL:** <https://www.finalbuilder.com/forums/t/help-ckr-pin-incorrect/7695>\
**Category:** Discussions\
**Created:** [August 11, 2025, 3:17pm UTC](https://www.finalbuilder.com/forums/t/help-ckr-pin-incorrect/7695 "2025-08-11T15:17:02Z")\
**Posts on this page:** 3\
**Page:** 1

<div class="post-metadata">

**Author:** ![dmaul](https://www.finalbuilder.com/forums/letter_avatar_proxy/v4/letter/d/57b2e6/32.png) [@dmaul](https://www.finalbuilder.com/forums/u/dmaul)\
**Post date:** [August 11, 2025, 3:17pm UTC](https://www.finalbuilder.com/forums/t/help-ckr-pin-incorrect/7695/1 "2025-08-11T15:17:02Z")

</div>

I suddenly started receiving CKR\_PIN\_EXPIRED (after about 30d of usage). I used SafeNet Authentication tool to change the token password, and I can successfully log in to the token with that new password. But now the Signotaur client is getting CKR\_PIN\_INCORRECT, which suggests that Signotaur is still using the old password, but I cannot figure out WHERE it is doing so, so that I can update it. Please help.

---

<div class="post-metadata">

**Author:** ![dmaul](https://www.finalbuilder.com/forums/letter_avatar_proxy/v4/letter/d/57b2e6/32.png) [@dmaul](https://www.finalbuilder.com/forums/u/dmaul)\
**Post date:** [August 11, 2025, 4:21pm UTC](https://www.finalbuilder.com/forums/t/help-ckr-pin-incorrect/7695/2 "2025-08-11T16:21:34Z")

</div>

I found the answer, but I will explain here in case someone else runs into it. On the local Signotaur server’s web page, on the Certificates tab: find the certificate whose token you are accessing, and on the right side of the page look for the asterisk icon with the tooltip “Update password”. Enter the new token password and the problem is solved.

---

<div class="post-metadata">

**Author:** ![Sparky](https://www.finalbuilder.com/forums/user_avatar/www.finalbuilder.com/sparky/32/10_2.png) [@Sparky](https://www.finalbuilder.com/forums/u/Sparky)\
**Post date:** [August 11, 2025, 10:51pm UTC](https://www.finalbuilder.com/forums/t/help-ckr-pin-incorrect/7695/3 "2025-08-11T22:51:23Z")

</div>

Hi Dave,

Note that you can also change the number of days before the pin expires:

> [@SafeNet Client and password](https://www.finalbuilder.com/forums/t/safenet-client-and-password/7631):
>
> I use a hardware token for signing. However, the SafeNet Client wants the password for signing to be reentered all 24h or after a reboot. If I use Signotaur, I can avoid this problem, can I? Signotaur fetches the certificate and there is no need for the SafeNet Client. Whiyxh in turn means, that I can remove the USB token and store it savely. Is this correct? tx Bernd