Install Futurex PKCS #11 (FXPKCS11)
Install FXPKCS11 on the same computer as the application integrating with the HSM.
Perform the following steps to install PKCS #11:
For a Linux Environment, download the tarball of the PKCS #11 binaries from the Portal.
Extract the .tar file locally where you want to install the application on your file system.
For the Futurex PKCS #11 module to be accessible system-wide, put it in /usr/local/bin by an administrative user. If only the current user needs to use the module, you can install in $HOME/bin.
The extracted content of the .tar file is a single fxpkcs11 directory with the following files and directories (Only files and folders relevant to the installation process are listed):
Filename or directory
Description
fxpkcs11.cfg
PKCS #11 configuration file to use for HSM Integrations.
x86/
This folder contains the module files for 32-bit architecture.
x64/
This folder contains the module files for 64-bit architecture.
The x86 and x64 directories have multiple directories named for the specific OpenSSL versions. These OpenSSL directories contain the PKCS #11 module files, built with the respective OpenSSL versions.
File name
Description
configTest
Program to test configuration and connection to the HSM.
libfxpkcs11.so
PKCS #11 Library file.
PKCS11Manager
Program to test connection and manage the HSM through the PKCS #11 library.
The configTest and PKCS11Manager programs look for the PKCS #11 configuration file in the /etc directory. You must either move the file from the /usr/local/bin/fxpkcs11 directory to the /etc directory or set the FXPKCS11_CFG environment variable to point to it.