In a Windows environment, the easiest way to install the Futurex PKCS #11 module is by using FXTools. Download FXTools from the Futurex portal to the computer that runs CyberArk TPF.
By default, FXTools installs all tools on the system. You can overwrite the default and choose which of the following modules to install:
| Module | Description |
|---|---|
| Futurex Client Tools | Command Line Interface (CLI) and associated SDK for both Java and C. |
| Futurex CNG Module | The Microsoft Next Generation Cryptographic Library. |
| Futurex Cryptographic Service Provider (CSP) | The Legacy Microsoft Cryptographic Library. |
| Futurex EKM Module | The Microsoft Enterprise Key Management library. |
| Futurex PKCS #11 Module | The Futurex PKCS #11 library and associated tools. |
| Futurex Secure Access Client | The Client used to connect a Futurex Excrypt Touch to a local laptop through USB and a remote Futurex device. |
The installation installs all selected services in the
C:\Program Files\Futurex directory. If you select the Futurex Secure Access Client, the Futurex Excrypt Touch driver also installs. It might start minimized or in the background.The CNG, CSP, EKM, and PKCS #11 modules all require configuration files located in their corresponding directory with a .cfg extension.Because the system installs only the HSM version of the PKCS #11 configuration file, you need to replace the
<HSM> section of the file with a <KMS> section to integrate with the KMES. To do this, go to the directory C:\Program Files\Futurex\ and delete the fxpkcs11.cfg file, then rename the fxpkcs11- kms.cfg file to fxpkcs11.cfg.