src/jdk.crypto.cryptoki/share/classes/sun/security/pkcs11/P11TlsRsaPremasterSecretGenerator.java

@@ -122,11 +122,11 @@
                     O_GENERATE, CKO_SECRET_KEY,
                     CKK_GENERIC_SECRET, new CK_ATTRIBUTE[0]);
             long keyID = token.p11.C_GenerateKey(session.id(),
                     new CK_MECHANISM(mechanism, version), attributes);
             SecretKey key = P11Key.secretKey(session,
-                    keyID, "TlsRsaPremasterSecret", 48 << 3, attributes);
+                    keyID, "TlsRsaPremasterSecret", 48 << 3, attributes, true);
             return key;
         } catch (PKCS11Exception e) {
             throw new ProviderException(
                     "Could not generate premaster secret", e);
         } finally {