Skip to main content
Verify your environment meets these requirements.

​
Supported hardware

  • Excrypt HSM (formerly Vectera Plus), firmware 7.2.x.x or later.
  • Windows 2016 or later

​
Required access

  • An account on the Excrypt HSM with administrator permissions to create application partitions, identities, TLS PKI, and update system settings.
  • Local administrator access on the Windows server on which Microsoft ADCS will be installed.

​
Network and firewall

  • Allow outbound TCP port 9100(default Excrypt port) from the Windows server running Microsoft ADCS to the Excrypt HSM, specified by FQDN (for example, hsm.example.com) or CIDR (for example, 10.0.0.0/24).
TLS inspection or SSL proxies can break mutual TLS handshakes. Exempt the Excrypt HSM FQDN(s) from inspection. Configure the Excrypt HSM with a FQDN so the exemption applies.