Hi Colin, just grabbed 10.2p1-1 from incoming. No change in behavior, enumeration of pkcs11 keys fails with "pin required" as it did with 10.1p1-2, only having the keys added to the agent makes the connection succeed. Jan --