Part 1: enabling system NSS 1) As root install nss-sysinit nss-sysinit has a post install scriplet that invokes '/usr/bin/setup-nsssysint.sh on" This scripts edits /etc/pki/nssdb/pkcs11.txt as follows
(a) In the stanza with NSS Internal PKCS #11 Module:
library= is changed to library=libnsssysinit.so
(b) In the same stanza, with NSS= changes the Flags from:
Flags=internal,critical to Flags=internal,moduleDBOnly,critical
nss-sysinit has a preuninstall install scriplet that invokes "/usr/bin/setup-nsssysint.sh off" which undoes these changes.
2) As root run "certutil -K -X -d sql:/etc/pki/nssdb" (this will create sl dsb's from the local dbm database).