KMES Series 3, application version 6.3.1.3 or later, with the initial setup completed (including loading a Platform Master Key, setting up the network, etc.), and the Data Protection license enabled.
Allow outbound TCP port 2001 (default Host API port) from the machine running the Futurex File Encryption Agent to the KMES Series 3, specified by FQDN (for example, kmes.example.com) or CIDR (for example, 10.0.0.0/24).
TLS inspection or SSL proxies can break mutual TLS handshakes. Exempt the KMES FQDN(s) from inspection. Configure the KMES Series 3 with an FQDN so the exemption applies.