Hints appreciated. The browser returns sec_error_pkcs11_function_failed, which is a non-specific error. I pulled down a nightly for the NSS debugging, and find the following PKCS11 debug (full debug avail on request): -1334726656[28e8ea0]: C_OpenSession -1334726656[28e8ea0]: slotID = 0x0 -1334726656[28e8ea0]: flags = 0x4 -1334726656[28e8ea0]: pApplication = 0x3130e00 -1334726656[28e8ea0]: Notify = 0x2533919 -1334726656[28e8ea0]: phSession = 0xb071aacc -1334726656[28e8ea0]: *phSession = 0x2 -1334726656[28e8ea0]: rv = CKR_OK -1334726656[28e8ea0]: C_SignInit -1334726656[28e8ea0]: hSession = 0x2 -1334726656[28e8ea0]: pMechanism = 0xb071ab1c -1334726656[28e8ea0]: hKey = 0x5 -1334726656[28e8ea0]: mechanism = CKM_RSA_PKCS -1334726656[28e8ea0]: rv = CKR_OK -1334726656[28e8ea0]: C_Sign -1334726656[28e8ea0]: hSession = 0x2 -1334726656[28e8ea0]: pData = 0xb071abdc -1334726656[28e8ea0]: ulDataLen = 36 -1334726656[28e8ea0]: pSignature = 0x188ccc00 -1334726656[28e8ea0]: pulSignatureLen = 0xb071ab28 -1334726656[28e8ea0]: *pulSignatureLen = 0x80 -1334726656[28e8ea0]: rv = CKR_FUNCTION_FAILED Since the module loads and does everything else correctly (near as I can tell) I'm not positive this is a FF bug. However, I don't know if it's an Apple bug either, so I haven't opened one against SmartCardServices ... yet. I know others are having the same problem, but with recent fixes in 10.6 and Safari the use of FF with smartcards has declined a bit (or alternative PKCS11 modules are being used). Anyone else have an idea? -- Tim