Hola. Investigando un poco, el agregado del .so/.dll que el Applet hace en código, se puede hacer por configuración en el sistema operativo host (linux en este caso)
To install the provider statically you need to add it as an entry to the java.security file which can be found in $JAVA_HOME/jre/lib/security/java.security for the JRE/JDK you are using. Look for a list of lines with security.provider.X where X is some number. At the bottom of the list add the line:security.provider.N=sun.security.pkcs11.SunPKCS11 /opt/bar/cfg/pkcs11.cfgwhere N is one more than the last number in the list.
The configuration file is a text file that contains entries in the following format.
attribute = valueThe valid values for attribute and value are described in the table in this section. The two mandatory attributes are name and library. Here is a sample configuration file.
name = FooAccelerator library = /opt/foo/lib/libpkcs11.so
Es decir, en el java.security agregar una linea apuntando a un .cfg y en el .cfg mandar el path del .so. Resulta raro porque los softwares que instalan drivers de los token no actualizan esta configuración… Sería de mucha utilidad probar si te funciona en kubuntu. Gracias