Install the Futurex PKCS #11 (FXPKCS11) module

1 min

install fxpkcs11 on the same computer as the application that integrates with the hsm perform the following steps to install {{futurex}} pkcs #11 download the {{futurex}} pkcs #11 binaries from the {{futurex}} portal built for your version of red hat e xtract the tar file for the red hat certificate system (rhcs) integration, the {{futurex}} pkcs #11 module should be installed in /usr/lib64/fxpkcs11 so that it is accessible system wide the extracted content of the tar file is a single fxpkcs11 directory this directory contains the following files and directories (only the files and folders relevant to the installation process are included in this list) file name or directory description fxpkcs11 cfg pkcs #11 configuration file to use for hsm integrations fxpkcs11 kms cfg (you might not use this file ) pkcs #11 configuration file to use for {{k3}} integrations x86/ this folder contains the module files for the 32 bit architecture x64/ this folder contains the module files for the 64 bit architecture the x86 and x64 directories contain multiple directories named for the specific openssl versions these openssl directories contain the pkcs #11 module files built with the respective openssl versions as of july 2025, futurex doesn't support openssl 3 x on x84 (32 bit) systems file name description configtest program to test the configuration and connection to the hsm libfxpkcs11 so pkcs #11 library file pkcs11manager program to test the connection and manage the hsm through the pkcs #11 library the libfxpkcs11 so library looks for the pkcs #11 configuration file in the /etc directory therefore, you need to move the /usr/lib64/fxpkcs11/fxpkcs11 cfg file to the /etc directory sudo mv /usr/lib64/fxpkcs11/fxpkcs11 cfg /etc/