Edit the Futurex PKCS #11 Configuration File

2min

﻿
Special compatibility mode configuration required for this integration
For this integration, add the following defines in the <CONFIG> section of the fxpkcs11.cfg file:
The hsm_demo and hsm_hmac_demo key labels correspond with the values for for the key_label and hmac_key_label values in the vault.hcl file
Text
<FORCED-LABEL-USAGE> hsm_demo = ENCRYPT | DECRYPT </FORCED-LABEL-USAGE>
<FORCED-LABEL-USAGE> hsm_hmac_demo = SIGN | VERIFY </FORCED-LABEL-USAGE>
<FORCED-LABEL-USAGE> hsm_demo = ENCRYPT | DECRYPT </FORCED-LABEL-USAGE>
<FORCED-LABEL-USAGE> hsm_hmac_demo = SIGN | VERIFY </FORCED-LABEL-USAGE>
﻿
These defines force speciifc usages for the two keys that Vault creates on the HSM, based on the key labels that are specified.
﻿
﻿
﻿

Configure TLS authentication

Configure the Futurex PKCS #11 Library with HashiCorp Vault