> ## Documentation Index
> Fetch the complete documentation index at: https://docs.futurex.com/llms.txt
> Use this file to discover all available pages before exploring further.

# Before you start

> Lists environment prerequisites and compatibility requirements before configuring SQL Server Always Encrypted with HSMs.

Verify your environment meets these requirements.

## Supported hardware

* Vectera Plus, `7.2.x.x` or later.

## Supported operating systems

* Windows 10 or later

## Required access

* An account on the Vectera Plus with administrator permissions to create application partitions, identities, TLS PKI, and update system settings.
* Local administrator privileges on the computer where Microsoft SQL Server is installed.

## Network and firewall

* Allow outbound TCP port **9100**(default Excrypt port) from the computer running Microsoft SQL Server to the Vectera Plus, specified by FQDN (for example, `hsm.example.com`) or CIDR (for example, `10.0.0.0/24`).

<Warning>
  TLS inspection or SSL proxies can break mutual TLS handshakes. Exempt the Vectera Plus FQDN(s) from inspection. Configure the Vectera Plus with a FQDN so the exemption applies.
</Warning>

## Other

* Microsoft SQL Server 2016 or later
* Microsoft SQL Server Management Studio (SSMS)
* Futurex CNG 5.4 or later (32-bit)

<Warning>
  You must use the 32-bit version of FXCNG for this integration. Microsoft SQL Always Encrypted is a 32-bit application and cannot integrate with the 64-bit version of FXCNG.
</Warning>