Install FXPKCS11 on the same computer as the application integrating with the KMES Series 3.
Extract the
.tar file locally where you want to install the application in your file system.If you need the Futurex PKCS #11 module to be accessible system-wide, an administrative user must install it in
/usr/local/bin. If only the current user needs the module, install it in $HOME/bin.The extracted content of the
.tar file is a single fxpkcs11 directory, which contains the following files and directories (only files and folders that are relevant to the installation process are shown here):| Filename or directory | Description |
|---|---|
fxpkcs11.cfg | PKCS #11 configuration file to use for HSM Integrations. |
fxpkcs11-kms.cfg | PKCS #11 configuration file to use for KMES Series 3 integrations. |
x86/ | This folder contains the module files for 32-bit architecture. |
x64/ | This folder contains the module files for 64-bit architecture. |
The
x86 and x64 directories have multiple directories named for the specific OpenSSL versions. These OpenSSL directories contain the PKCS #11 module files, built with the respective OpenSSL versions.| File name | Description |
|---|---|
configTest | Program to test the configuration and connection to the HSM. |
libfxpkcs11.so | PKCS #11 Library file. |
PKCS11Manager | Program to test the connection and manage the HSM through the PKCS #11 library. |
The
configTest and PKCS11Manager programs look for the PKCS #11 configuration file in the /etc directory. You must perform one of the following options:- Move the file from the
/usr/local/bin/fxpkcs11directory to the/etcdirectory. - Set the FXPKCS11_CFG environment variable to point to the PKCS #11 configuration file.
If using the KMES version of the PKCS #11 configuration file (
fxpkcs11-kms.cfg), rename the file to fxpkcs11.cfg.
