Skip to main content
Verify your environment meets these requirements.

Supported hardware

  • Excrypt HSM (formerly Vectera Plus), firmware 7.2.x.x or later.
  • Windows 10 or later

Required access

  • An account on the Excrypt HSM with administrator permissions to create application partitions, identities, TLS PKI, and update system settings.
  • Local administrator/root access on the Windows machine.

Network and firewall

  • Allow outbound TCP port 9100(default Excrypt port) from the Windows machine to the Excrypt HSM, specified by FQDN (for example, hsm.example.com) or CIDR (for example, 10.0.0.0/24).
TLS inspection or SSL proxies can break mutual TLS handshakes. Exempt the Excrypt HSM FQDN(s) from inspection. Configure the Excrypt HSM with a FQDN so the exemption applies.