I think the PKCS11 environment variable should still work. But you don't need to specify the slot any more, unless you have more than one token. Our current code allows you to specify the slot like this: pkinit -X X509_user_identity=PKCS11:module_name:slotno but I don't know if that's in svn or not.