Curity Identity Server is a Linux based server that can run on most standard Linux distribtuions, however the following are officially tested and supported by Curity:
Allow outbound TCP port 2001 (default Host API port) from the Curity server to the CryptoHub, specified by FQDN (for example, cryptohub.example.com) or CIDR (for example, 10.0.0.0/24).
TLS inspection or SSL proxies can break mutual TLS handshakes. Exempt the CryptoHub FQDN(s) from inspection. Configure the CryptoHub with an FQDN so the exemption applies.
Futurex PKCS #11 (FXPKCS11) 6.0 rev dc27 or later. The library bundled in the endpoint ZIP (4.59) does not support the keytool key-generation flow and lists 0 keystore entries. Obtain dc27+ from the Futurex Portal and replace the bundled library.