diff --git a/bin/tests/system/engine_pkcs11/setup.sh b/bin/tests/system/engine_pkcs11/setup.sh
index bbb75a359b..5c764746c2 100644
--- a/bin/tests/system/engine_pkcs11/setup.sh
+++ b/bin/tests/system/engine_pkcs11/setup.sh
@@ -30,7 +30,7 @@ keygen() {
 	id="$4"
 
 	label="${id}-${zone}"
-	p11id=$(echo "${label}" | sha1sum - | awk '{print $1}')
+	p11id=$(echo "${label}" | openssl sha1 -r | awk '{print $1}')
 	pkcs11-tool --module $SOFTHSM2_MODULE --token-label "softhsm2-engine_pkcs11" -l -k --key-type $type:$bits --label "${label}" --id "${p11id}" --pin $(cat $PWD/pin) > pkcs11-tool.out.$zone.$id 2> pkcs11-tool.err.$zone.$id || return 1
 }
 
diff --git a/bin/tests/system/keyfromlabel/tests.sh b/bin/tests/system/keyfromlabel/tests.sh
index 09c5d6fb0f..c0a3c0aeba 100644
--- a/bin/tests/system/keyfromlabel/tests.sh
+++ b/bin/tests/system/keyfromlabel/tests.sh
@@ -23,7 +23,7 @@ keygen() {
 	id="$4"
 
 	label="${id}-${zone}"
-	p11id=$(echo "${label}" | sha1sum - | awk '{print $1}')
+	p11id=$(echo "${label}" | openssl sha1 -r | awk '{print $1}')
 	pkcs11-tool --module $SOFTHSM2_MODULE --token-label "softhsm2-keyfromlabel" -l -k --key-type $type:$bits --label "${label}" --id "${p11id}" --pin $(cat $PWD/pin) > pkcs11-tool.out.$zone.$id || return 1
 }
 
diff --git a/doc/arm/pkcs11.inc.rst b/doc/arm/pkcs11.inc.rst
index e9dc6c5ef8..5fd29d4e3d 100644
--- a/doc/arm/pkcs11.inc.rst
+++ b/doc/arm/pkcs11.inc.rst
@@ -206,8 +206,8 @@ this is when creating ECDSA keys, you should specify a unique ID:
 
 ::
 
-   ksk=$(echo "example.net-ksk" | sha1sum - | awk '{print $1}')
-   zsk=$(echo "example.net-zsk" | sha1sum - | awk '{print $1}')
+   ksk=$(echo "example.net-ksk" | openssl sha1 -r | awk '{print $1}')
+   zsk=$(echo "example.net-zsk" | openssl sha1 -r | awk '{print $1}')
    pkcs11-tool --module <FULL_PATH_TO_HSM_MODULE> -l -k --key-type EC:prime256v1 --id $ksk --label example.net-ksk --pin <PIN>
    pkcs11-tool --module <FULL_PATH_TO_HSM_MODULE> -l -k --key-type EC:prime256v1 --id $zsk --label example.net-zsk --pin <PIN>