Skip to main content
For this step, you must log in with an identity that has a role with the Identity:Add permission. You can use the default Administrator role and Admin identities.
Choose one of the following methods to create the identity and associate it with the application partition:

​
Excrypt Manager

Perform the following steps to use Excrypt Manager to create an identity and associate it with the partition:
1
Go to the Identity Management menu and select Add.
2
Specify a name for the new identity.
3
In the Roles drop-down menu, select the application partition that you created.
4
Create a password and enter it in both the Password and Confirm Password fields.
5
If the HSM is in FIPS mode, repeat the preceding steps to create a second identity for the same application partition.

​
FXCLI

Run the identity add FXCLI command to create a new identity and associate it with the application partition that you created:
FXCLI
If the HSM is in FIPS mode, run the command again to create a second identity for the same application partition.

​
Set the identities in the configuration file

Set the name of each identity in the <HSM> section of the fxpkcs11.cfg file:
fxpkcs11.cfg
In FIPS mode, the library logs in both identities. If the application supplies the password at login (C_Login), the library uses that password for both identities, so both identities must have the same password. If you provide the passwords through the <CRYPTO-OPR-PASS> and <CRYPTO-OPR-PASS2> fields or the FXPKCS11_PASS and FXPKCS11_PASS2 environment variables, the two passwords can differ.