> ## Documentation Index
> Fetch the complete documentation index at: https://docs.futurex.com/llms.txt
> Use this file to discover all available pages before exploring further.

# Install Futurex PKCS #11

> Step-by-step installation of the Futurex PKCS #11 module on the vSEC:CMS host.

Perform the following steps to install the Futurex PKCS #11 module on the computer where you installed Verasec vSEC:CMS:

<Steps>
  <Step>
    In a Windows environment, the easiest way to install the Futurex PKCS #11 module is by using **FXTools**. Download FXTools from the Futurex portal.
  </Step>

  <Step>
    Run the FXTools installer as an administrator.
  </Step>

  <Step>
    By default, all tools are installed on the system, but you can overwrite the default and choose which of the following modules to install:

    <table>
      <thead>
        <tr>
          <th><em><strong>Module</strong></em></th>
          <th><em><strong>Description</strong></em></th>
        </tr>
      </thead>

      <tbody>
        <tr>
          <td><strong>Futurex Client Tools</strong></td>
          <td>Command Line Interface (CLI) and associated SDK for both Java and C,</td>
        </tr>

        <tr>
          <td><strong>Futurex CNG Module</strong></td>
          <td>The Microsoft Next Generation Cryptographic Library.</td>
        </tr>

        <tr>
          <td><strong>Futurex Cryptographic Service Provider (CSP)</strong></td>
          <td>The Legacy Microsoft Cryptographic Library.</td>
        </tr>

        <tr>
          <td><strong>Futurex EKM Module</strong></td>
          <td>The Microsoft Enterprise Key Management library.</td>
        </tr>

        <tr>
          <td><strong>Futurex PKCS #11 Module</strong></td>
          <td>The Futurex PKCS #11 library and associated tools.</td>
        </tr>

        <tr>
          <td><strong>Futurex Secure Access Client</strong></td>
          <td>The Client used to connect a Futurex Excrypt Touch attached to a local laptop through USB and a remote Futurex device.</td>
        </tr>
      </tbody>
    </table>

    <Check>
      The installation process installs all selected services in the `C:\Program Files\Futurex` directory. If you selected the Futurex Secure Access Client, the Futurex Excrypt Touch driver also installs. It might start minimized or in the background.

      The CNG, CSP, EKM, and PKCS #11 modules all require configuration files located in their respective directories, which have a `.cfg` extension.
    </Check>
  </Step>

  <Step>
    Because the system installs only the HSM version of the PKCS #11 configuration file, you need to replace the `<HSM>` section of the file with a `<KMS>` section to integrate with the KMES. To do this, go to the directory `C:\Program Files\Futurex\` and delete the `fxpkcs11.cfg` file, and then rename the `fxpkcs11-kms.cfg` file to `fxpkcs11.cfg`.
  </Step>
</Steps>