Skip to main content
Verify your environment meets these requirements.

​
Supported hardware

  • Excrypt HSM (formerly Vectera Plus), firmware 7.2.x.x or later.

​
Supported operating systems

  • To configure OpenVPN’s Access Server:
    • Linux. The Futurex PKCS #11 package includes a build for each OpenSSL branch (1.0.x, 1.1.x, and 3.x); use the build that matches the OpenSSL version on the computer (openssl version).
      • Ubuntu 24.04
      • Debian 13
      • Red Hat Enterprise Linux 8 and 9
  • To use OpenVPN’s Connect v3:
    • macOS Catalina, Big Sur, Monterey, Ventura, Sonoma, and Sequoia
    • Windows 10 and 11

​
Required access

  • Both default administrator identities (Admin1 and Admin2), or two identities with equivalent permissions. Creating application partitions and identities requires dual control, so both must log in.
  • Local administrator/root privileges on the computer where OpenVPN Access Server is installed.

​
Network and firewall

  • Allow outbound TCP port 9100 (default Excrypt port) from the computer running OpenVPN Access Server to the Excrypt HSM, specified by FQDN (for example, hsm.example.com) or CIDR (for example, 10.0.0.0/24).
  • If you configure the HSM over the network with FXCLI or Excrypt Manager, allow TCP port 9009 (default admin port) from that workstation to the HSM. Administrator logins work only on the admin port.
TLS inspection or SSL proxies can break mutual TLS handshakes. Exempt the Excrypt HSM FQDNs from inspection. Configure the HSM with an FQDN so the exemption applies.

​
Other