Skip to main content
The Nexus PKI service provisions the FXPKCS11 client library, the application identity that Certificate Manager logs in with, and the key group that holds the CA key. Complete the following steps to deploy the service in CryptoHub:
1
Log in to the CryptoHub under dual control using your administrator identities.
2
Select the Nexus PKI service in the Certificate Authority category and select [ Deploy ].
3
Configure the following Service Setup settings:
  • Service Name: The name of the application. Leave as default.
  • Service Category: The category the service falls under. Leave as default.
CryptoHub names the service key group after the service name, for example Nexus PKI-Asym. You find the CA key in that key group later in Key Management.Select [ Next ].
4
Configure the following Access Control settings:
  • Authorized Resources: The role you are logged in with has access to the service by default.
  • Add Additional Resources: Optional.
Select [ Next ].
5
Configure the following Service Info setting:
  • Authentication Mechanism: Leave it set to the default authentication mechanism.
Select [ Deploy ].
The service appears under Deployed Services on the CryptoHub home page with the name you entered.