Skip to main content
You can complete most tasks in this section by using either Excrypt Manager or FXCLI. To create client certificates for mutual authentication (task 8, second option), you must use FXCLI.You can optionally complete tasks 4 through 7 by using the Guardian Series 3. For details, see Guardian Series 3: Configure HSMs for PKCS #11 integrations.
If you use a virtual HSM, you can’t use the front USB port. Connect to it over the network through FXCLI (admin port 9009), the Excrypt Touch, or the Guardian Series 3.
To establish a connection between the Futurex PKCS #11 library and the Excrypt HSM, perform the following configuration tasks:
  1. Connect to the HSM through the front USB port by using Excrypt Manager or FXCLI.
  2. Validate the enabled features on the HSM.
  3. Set up the network configuration.
  4. Load the FTK and PMK major keys, and optionally the BEK.
  5. Configure the transaction processing connection.
  6. Create an application partition for the integration.
  7. Create an identity that has access to the new application partition.
  8. Configure TLS authentication by using one of the following options:
    • Enable server-side authentication.
    • Create client certificates for mutual authentication.