Install Futurex PKCS #11 (FXPKCS11) - Futurex Documentation

Install the Futurex PKCS #11 shared library on the ADSS Server host.

Linux

Download the Futurex PKCS #11 package

Obtain the Futurex PKCS #11 package from FXTools for your platform architecture and OpenSSL version.

Extract the package

Extract the archive. It contains the following files:

File	Description
libfxpkcs11.so	Futurex PKCS #11 shared library
fxpkcs11.cfg	PKCS #11 configuration file
PKCS11Manager	PKCS #11 management utility
configTest	Configuration test utility

Copy the library to the installation directory

Copy the library files to the system-wide installation path:

Shell

sudo mkdir -p /usr/local/lib/fxpkcs11
sudo cp libfxpkcs11.so /usr/local/lib/fxpkcs11/
sudo cp PKCS11Manager configTest /usr/local/lib/fxpkcs11/

Place the configuration file

Copy the configuration file to /etc:

Shell

sudo cp fxpkcs11.cfg /etc/fxpkcs11.cfg

By default, the Futurex PKCS #11 library looks for the configuration file at /etc/fxpkcs11.cfg. To use a custom location, set the FXPKCS11_CFG environment variable to the full path of the configuration file.

Verify the library is accessible

Confirm the library file is readable by the user running ADSS Server (typically root):

Shell

ls -la /usr/local/lib/fxpkcs11/libfxpkcs11.so

The library file exists and has read permissions for the ADSS Server process user.

The PKCS #11 library logs operations to /tmp/fxpkcs11.log by default. This log is useful for verifying HSM calls during testing.

⌘I

​Linux

Linux