Skip to main content

Documentation Index

Fetch the complete documentation index at: https://docs.futurex.com/llms.txt

Use this file to discover all available pages before exploring further.

Install FXPKCS11 on the same computer as the application that integrates with the KMES Series 3.
Perform the following steps to install Futurex PKCS #11:
1
For a Linux Environment, download the tarball of the PKCS #11 binaries from the Futurex Portal.
2
Extract the .tar file locally where you want to install the application on your file system.
For the Futurex PKCS #11 module to be accessible system-wide, an administrative user must place it to /usr/local/lib. If only the current user needs to use the module, then installing it to $HOME/lib is appropriate.
3
The extracted content of the .tar file is a single fxpkcs11 directory. This directory contains the following files and directories (only the files and folders relevant to the installation process are included in this list):
File name or directoryDescription
fxpkcs11.cfgPKCS #11 configuration file to use for HSM integrations.
fxpkcs11-kms.cfgPKCS #11 configuration file to use for KMES Series 3 integrations.
You must rename this file to fxpkcs11.cfg and configure it for the connection.
x86/This folder contains the module files for the 32-bit architecture.
x64/This folder contains the module files for the 64-bit architecture.
4
The x86 and x64 directories contain multiple directories named for the specific OpenSSL versions. These OpenSSL directories contain the PKCS #11 module files built with the respective OpenSSL versions.
As of July 2025, Futurex doesn’t support OpenSSL 3.x on x84 (32-bit) systems.
File nameDescription
configTestProgram to test the configuration and connection to the HSM.
libfxpkcs11.soPKCS #11 Library file.
PKCS11ManagerProgram to test the connection and manage the HSM through the PKCS #11 library.
5
The configTest and PKCS11Manager programs look for the PKCS #11 configuration file (fxpkcs11.cfg) in the /etc directory. You must either move the file from the /usr/local/lib/fxpkcs11 directory to the /etc directory or set the FXPKCS11_CFG environment variable to point to it.
IMPORTANTYou must use the KMES version of the PKCS #11 configuration file (fxpkcs11-kms.cfg). Rename the file to fxpkcs11.cfg and move it to the /etc directory or set the FXPKCS11_CFG environment variable to point to it.