src/jdk.crypto.cryptoki/share/classes/sun/security/pkcs11/P11KeyGenerator.java

@@ -270,12 +270,12 @@
             }
             attributes = token.getAttributes
                 (O_GENERATE, CKO_SECRET_KEY, keyType, attributes);
             long keyID = token.p11.C_GenerateKey
                 (session.id(), new CK_MECHANISM(mechanism), attributes);
-            return P11Key.secretKey
-                (session, keyID, algorithm, significantKeySize, attributes);
+            return P11Key.secretKey(session, keyID, algorithm,
+                    significantKeySize, attributes, true);
         } catch (PKCS11Exception e) {
             throw new ProviderException("Could not generate key", e);
         } finally {
             token.releaseSession(session);
         }