Install FXPKCS11 on the same computer as the application that integrates with the HSM.
Extract the
.tar file.For the Red Hat Certificate System (RHCS) integration, the Futurex PKCS #11 module should be installed in
/usr/lib64/fxpkcs11 so that it is accessible system-wide.The extracted content of the
.tar file is a single fxpkcs11 directory. This directory contains the following files and directories (only the files and folders relevant to the installation process are included in this list):| File name or directory | Description |
|---|---|
fxpkcs11.cfg | PKCS #11 configuration file to use for HSM integrations. |
fxpkcs11-kms.cfg | (You might not use this file.) PKCS #11 configuration file to use for KMES Series 3 integrations. |
x86/ | This folder contains the module files for the 32-bit architecture. |
x64/ | This folder contains the module files for the 64-bit architecture. |
The
x86 and x64 directories contain multiple directories named for the specific OpenSSL versions. These OpenSSL directories contain the PKCS #11 module files built with the respective OpenSSL versions.As of July 2025, Futurex doesn’t support OpenSSL
3.x on x84 (32-bit) systems.| File name | Description |
|---|---|
configTest | Program to test the configuration and connection to the HSM. |
libfxpkcs11.so | PKCS #11 Library file. |
PKCS11Manager | Program to test the connection and manage the HSM through the PKCS #11 library. |

