Yes that would give max flexability. But id and label may conflict, but that's the user's problem. Jim Rees wrote: > So then something like this? > > X509_user_identity=PKINIT:module_name=/usr/lib/pkcs11.so:slotid=4:id=45:label=Cert1 > > -- Douglas E. Engert <DEEngert at anl.gov> Argonne National Laboratory 9700 South Cass Avenue Argonne, Illinois 60439 (630) 252-5444