name = NSS-FIPS nssLibraryDirectory = /usr/lib64 nssSecmodDirectory = ${fips.nssdb.path} nssDbMode = readWrite nssModule = fips attributes(*,CKO_SECRET_KEY,CKK_GENERIC_SECRET)={ CKA_SIGN=true }