Skip to main content
Verify your environment meets these requirements.

​
Supported hardware

  • CryptoHub 7.0.3.x. This guide covers the FXCL KMES CNG client that the CryptoHub 7.0.3.x Microsoft ADCS service delivers. It also applies on later CryptoHub versions if you keep an existing FXCL KMES CNG installation.
  • On CryptoHub 7.2.0.x, the endpoint download delivers the CryptoHub Client Library CNG provider instead. For its install and verification steps, see Install and configure CryptoHub CNG.

​
Supported operating systems

  • Windows 2012 R2 (6.3.9600) or later

​
Required access

  • An account on the CryptoHub with administrator permissions to deploy new services.
  • Local administrator/root access on the Windows Server where you will install Microsoft ADCS.

​
Network and firewall

  • Allow outbound TCP port 2001(default Host API port) from the Microsoft ADCS server to the CryptoHub, specified by FQDN (for example, cryptohub.example.com) or CIDR (for example, 10.0.0.0/24).
The port 2001 rule applies to FXCL KMES CNG. The CryptoHub Client Library CNG provider connects to CryptoHub over HTTPS on TCP port 443.
TLS inspection or SSL proxies can break mutual TLS handshakes. Exempt the CryptoHub FQDN(s) from inspection. Configure the CryptoHub with a FQDN so the exemption applies.