Thales Luna SA HSM integration - Partition Pin

[vvets]

EJBCA Container is running into issues when generating a crypto token with following exception:
ejbca-container | Caused by: javax.security.auth.login.LoginException
ejbca-container | at jdk.crypto.cryptoki/sun.security.pkcs11.SunPKCS11.login(Unknown Source)
ejbca-container | at jdk.crypto.cryptoki/sun.security.pkcs11.P11KeyStore.login(Unknown Source)
ejbca-container | ... 154 more
ejbca-container | Caused by: sun.security.pkcs11.wrapper.PKCS11Exception: 0x80000067
ejbca-container | at jdk.crypto.cryptoki/sun.security.pkcs11.wrapper.PKCS11.C_Login(Native Method)
ejbca-container | ... 156 more

UI error reads like "Error: Failed to initialize PKCS11 provider slot '1'."

It is because the container doesn't have the partition pin for HSM.

From container shell, the HSM partition is accessible when the pin is provided in command line.

Question is: How is the HSM partition pin passed to container?

Thanks

[vvets]

Figured it out - it is on the UI only.