Edit the Futurex PKCS #11 configuration file

2min

﻿
Special defines required for this integration
For the Venafi integration, add the following defines to the <CONFIG> section of the FXPKCS11 configuration file:
Text
# Override all key usage requests with specific values
<FORCED-SYMMETRIC-USAGE>   ENCRYPT | DECRYPT   </FORCED-SYMMETRIC-USAGE>
<FORCED-ASYMMETRIC-USAGE>  SIGN | VERIFY       </FORCED-ASYMMETRIC-USAGE>
	
# Specific for Venafi integration
<VENAFI-COMPAT>             YES                  </VENAFI-COMPAT>
<VENAFI-CONNECT-PING>       NO                  </VENAFI-CONNECT-PING>

# Generate keys with login requirement even if the application does not explicitly mark them as "private"
<KEY-REQUIRE-LOGIN>         NO                 </KEY-REQUIRE-LOGIN>
# Override all key usage requests with specific values
<FORCED-SYMMETRIC-USAGE>   ENCRYPT | DECRYPT   </FORCED-SYMMETRIC-USAGE>
<FORCED-ASYMMETRIC-USAGE>  SIGN | VERIFY       </FORCED-ASYMMETRIC-USAGE>
	
# Specific for Venafi integration
<VENAFI-COMPAT>             YES                  </VENAFI-COMPAT>
<VENAFI-CONNECT-PING>       NO                  </VENAFI-CONNECT-PING>

# Generate keys with login requirement even if the application does not explicitly mark them as "private"
<KEY-REQUIRE-LOGIN>         NO                 </KEY-REQUIRE-LOGIN>
﻿
In addition, change the <WRAP-PRESERVE-USAGE> define to NO in the <CONFIG> section.
﻿
﻿

Updated 09 Aug 2024

Did this page help you?

Configure TLS authentication

Configure Venafi TPP to use the Vectera Plus