Edit the Futurex PKCS #11 configuration file

2min

﻿
Special compatibility mode conifguration required for this integration
The HashiCorp Vault Managed Keys integration requires you to add the following definitions to the <CONFIG> section of the fxpkcs11.cfg file:
Text
# Override all key usage requests with specific values
<FORCED-SYMMETRIC-USAGE>   ENCRYPT | DECRYPT   </FORCED-SYMMETRIC-USAGE>
<FORCED-ASYMMETRIC-USAGE>  SIGN | VERIFY       </FORCED-ASYMMETRIC-USAGE>
# Override all key usage requests with specific values
<FORCED-SYMMETRIC-USAGE>   ENCRYPT | DECRYPT   </FORCED-SYMMETRIC-USAGE>
<FORCED-ASYMMETRIC-USAGE>  SIGN | VERIFY       </FORCED-ASYMMETRIC-USAGE>
﻿
This forces specific usages for the symmetric and asymmetric keys that Vault creates on the .
﻿

Updated 17 Sep 2024

Did this page help you?

Enable the EDSVWU multi-usage combination for asymmetric keys

Configure the Futurex PKCS #11 Library with HashiCorp Vault