Skip to main content
Install FXPKCS11 on the same computer as the application that integrates with the HSM.
Perform the following steps to install Futurex PKCS #11:
1
Download the Futurex PKCS #11 binaries from the Futurex Portal built for your version of Red Hat.
2
Extract the .tar file.
For the Red Hat Certificate System (RHCS) integration, the Futurex PKCS #11 module should be installed in /usr/lib64/fxpkcs11 so that it is accessible system-wide.
3
The extracted content of the .tar file is a single fxpkcs11 directory. This directory contains the following files and directories (only the files and folders relevant to the installation process are included in this list):
File name or directoryDescription
fxpkcs11.cfgPKCS #11 configuration file to use for HSM integrations.
fxpkcs11-kms.cfg(You might not use this file.) PKCS #11 configuration file to use for KMES Series 3 integrations.
x86/This folder contains the module files for the 32-bit architecture.
x64/This folder contains the module files for the 64-bit architecture.
4
The x86 and x64 directories contain multiple directories named for the specific OpenSSL versions. These OpenSSL directories contain the PKCS #11 module files built with the respective OpenSSL versions.
As of July 2025, Futurex doesn’t support OpenSSL 3.x on x84 (32-bit) systems.
File nameDescription
configTestProgram to test the configuration and connection to the HSM.
libfxpkcs11.soPKCS #11 Library file.
PKCS11ManagerProgram to test the connection and manage the HSM through the PKCS #11 library.
5
The libfxpkcs11.so library looks for the PKCS #11 configuration file in the /etc directory. Therefore, you need to move the /usr/lib64/fxpkcs11/fxpkcs11.cfg file to the /etc directory:
Shell
sudo mv /usr/lib64/fxpkcs11/fxpkcs11.cfg /etc/