src/jdk.crypto.cryptoki/share/classes/sun/security/pkcs11/P11KeyPairGenerator.java

@@ -414,13 +414,13 @@
                 (O_GENERATE, CKO_PRIVATE_KEY, keyType, privateKeyTemplate);
             long[] keyIDs = token.p11.C_GenerateKeyPair
                 (session.id(), new CK_MECHANISM(mechanism),
                 publicKeyTemplate, privateKeyTemplate);
             PublicKey publicKey = P11Key.publicKey
-                (session, keyIDs[0], algorithm, keySize, publicKeyTemplate);
+                (session, keyIDs[0], algorithm, keySize, publicKeyTemplate, true);
             PrivateKey privateKey = P11Key.privateKey
-                (session, keyIDs[1], algorithm, keySize, privateKeyTemplate);
+                (session, keyIDs[1], algorithm, keySize, privateKeyTemplate, true);
             return new KeyPair(publicKey, privateKey);
         } catch (PKCS11Exception e) {
             throw new ProviderException(e);
         } finally {
             token.releaseSession(session);