--- old/src/jdk.crypto.cryptoki/share/classes/sun/security/pkcs11/P11TlsRsaPremasterSecretGenerator.java	2018-09-18 15:58:04.311408566 +0200
+++ new/src/jdk.crypto.cryptoki/share/classes/sun/security/pkcs11/P11TlsRsaPremasterSecretGenerator.java	2018-09-18 15:58:04.137407394 +0200
@@ -124,7 +124,7 @@
             long keyID = token.p11.C_GenerateKey(session.id(),
                     new CK_MECHANISM(mechanism, version), attributes);
             SecretKey key = P11Key.secretKey(session,
-                    keyID, "TlsRsaPremasterSecret", 48 << 3, attributes);
+                    keyID, "TlsRsaPremasterSecret", 48 << 3, attributes, true);
             return key;
         } catch (PKCS11Exception e) {
             throw new ProviderException(