Install Futurex PKCS #11 (FXPKCS11)

1min
Install FXPKCS11 on the same computer as the application integrating with the  HSM.
Perform the following steps to install  PKCS #11:
Windows
Linux
1
In a Windows environment, the easiest way to install the  PKCS #11 module is to download FXTools from the  portal. 
2
After it downloads, run the FXTools installer as an administrator.
3
By default, all tools are installed on the system, but you can overwrite and choose not to install any of the following modules:
Module
Description
﻿
Futurex Client Tools
Command Line Interface (CLI) and associated SDK for both Java and C,
﻿
Futurex CNG Module
The Microsoft Next Generation Cryptographic Library.
﻿
Futurex Cryptographic Service Provider (CSP)
The Legacy Microsoft Cryptographic Libary.
﻿
Futurex EKM Module
The Microsoft Enterprise Key Management library.
﻿
Futurex PKCS #11 Module
The  PKCS #11 library and associated tools.
﻿
Futurex Secure Access Client
The Client used to connect an Excrypt Touch to a local laptop with USB, and a remote  device.
﻿
4
After starting the process, the system installs all noted services. If you select the  Secure Access Client, the Excrypt Touch driver also installs (sometimes starting minimized or in the background).
5
After the installation installs all services in the C:\Program Files\Futurex directory, you must edit the configuration files for the CNG, CSP, EKM, and PKCS #11 modules. Find these files in their corresponding directory with a .cfg extension.
﻿
1
For a Linux environment, download the tarball of the PKCS #11 binaries from the  Portal.
2
Extract the .tar file locally where you want to install the application in your file system.
For the  PKCS #11 module to be accessible system-wide, an administrative user should put it in /usr/local/bin. If the module only needs to be used by the current user, then installing it in $HOME/bin is appropriate.
3
The extracted content of the .tar file is a single fxpkcs11 directory, which has the following files and directories (Only files/folders relevant to the installation process are included here):
Filename or directory
Description
﻿
fxpkcs11.cfg
﻿
PKCS #11 configuration file to use for HSM Integrations.
﻿
x86/
This folder contains the module files for 32-bit architecture.
﻿
x64/
This folder contains the module files for 64-bit architecture.
﻿
4
The x86 and x64 directories have multiple directories named for the specific OpenSSL versions. These OpenSSL directories contain the PKCS #11 module files, built with the respective OpenSSL versions. 
File name
Description
﻿
configTest
Program to test configuration and connection to the HSM.
﻿
libfxpkcs11.so
PKCS #11 Library file.
﻿
PKCS11Manager
Program to test connection and manage the HSM through the PKCS #11 library.
﻿
5
The configTest and PKCS11Manager programs look for the PKCS #11 configuration file in the /etc directory. You must either move the file from the /usr/local/bin/fxpkcs11 directory to the /etc directory or set the FXPKCS11_CFG environment variable to point to the PKCS #11 configuration file.
﻿
﻿
Updated 26 Jul 2024
Did this page help you?
Before you start
Install Excrypt Manager (If using Windows)