Before you start - Futurex Documentation

Verify your environment meets these requirements.

Supported hardware

KMES Series 3, application version 6.3.1.x or later, with initial setup completed (including loading a Platform Master Key and network configuration).

Supported operating systems

To configure OpenVPN’s Access Server:
- Linux
  - Ubuntu 22.04 and 24.04 (20.04 not supported in OpenVPN 3.0.0+)
  - Debian 11 and 12
  - Red Hat Enterprise Linux 8 and 9
To use OpenVPN’s Connect v3:
- macOS Catalina, Big Sur, Monterey, Ventura, Sonoma, and Sequoia
- Windows 10 and 11

Required access

Local administrator/root access on the computer where OpenVPN Access Server is installed.

Network and firewall

Allow outbound TCP port 2001(default Host API port) from the computers running OpenVPN Access Server and OpenVPN Connect to the KMES Series 3, specified by FQDN (for example, kmes.example.com) or CIDR (for example, 10.0.0.0/24).

TLS inspection or SSL proxies can break mutual TLS handshakes. Exempt the KMES FQDN(s) from inspection. Configure the KMES Series 3 with a FQDN so the exemption applies.

Other

OpenSSL (version 3.x or newer)
pkcs11-tool (found under opensc in Linux Package Manager)
OpenVPN Access Server (Linux VPN Server: Installation and Setup for OpenVPN)
Python 3.6 and newer installed on the device configuring OpenVPN Access Server

uri2pem.py script

Python library asn1crypto