> ## Documentation Index
> Fetch the complete documentation index at: https://docs.futurex.com/llms.txt
> Use this file to discover all available pages before exploring further.

# Before you start

> Pre-installation checklist: verify hardware, OS, access, and network requirements for Java Jarsigner integration.

Verify your environment meets these requirements.

## Supported hardware

* KMES Series 3, application version `6.3.1.3` or later, with initial setup completed (including loading a Platform Master Key and network configuration).

## Supported operating systems

* Windows 10 or later
* Linux

## Required access

* An account on the KMES with administrator permissions to create roles, identities, TLS PKI, and update system settings.
* Local administrator/root access on the machine where Java Jarsigner is installed.

## Network and firewall

* Allow outbound TCP port **2001**(default Host API port) from the Java Jarsigner machine to the KMES Series 3, specified by FQDN (for example, `kmes.example.com`) or CIDR (for example, `10.0.0.0/24`).

<Warning>
  TLS inspection or SSL proxies can break mutual TLS handshakes. Exempt the KMES FQDN(s) from inspection. Configure the KMES Series 3 with an FQDN so the exemption applies.
</Warning>

## Other

* Oracle Java 11, 17, or 21

<Warning>
  To ensure proper compatibility between Java SunPKCS11 and the Futurex PKCS11 module, you must use Oracle Java instead of OpenJDK. We support Oracle Java 11, 17, and 21.
</Warning>