Skip to main content
Verify your environment meets these requirements.

​
Supported hardware

  • KMES Series 3, application version 6.3.1.3 or later, with initial setup completed (including loading a Platform Master Key and network configuration).

​
Supported operating systems

  • Windows 10 or later
  • Linux

​
Required access

  • An account on the KMES with administrator permissions to create roles, identities, TLS PKI, and update system settings.
  • Local administrator/root access on the machine where Java Jarsigner is installed.

​
Network and firewall

  • Allow outbound TCP port 2001(default Host API port) from the Java Jarsigner machine to the KMES Series 3, specified by FQDN (for example, kmes.example.com) or CIDR (for example, 10.0.0.0/24).
TLS inspection or SSL proxies can break mutual TLS handshakes. Exempt the KMES FQDN(s) from inspection. Configure the KMES Series 3 with an FQDN so the exemption applies.

​
Other

  • Oracle Java 11, 17, or 21
To ensure proper compatibility between Java SunPKCS11 and the Futurex PKCS11 module, you must use Oracle Java instead of OpenJDK. We support Oracle Java 11, 17, and 21.