OpenSSL Engine

this document provides information on configuring {{futurex}} hsms with openssl engine by using pkcs #11 libraries for additional questions related to your hsm, see the relevant administrator guide application description from the main opensc libp11 page on github ( https //github com/opensc/libp11 ) openssl implements various cipher, digest, and signing features, and it can consume and produce keys however, many people believe that these features should be implemented in separate hardware, such as usb tokens, smart cards, or hsms therefore, openssl has an abstraction layer, or engine , which can delegate some of these features to different software or hardware engine pkcs11 tries to fit the pkcs#11 api within the engine api of openssl that is, it provides a gateway between pkcs#11 modules and the openssl engine api register the engine with openssl and provide the path the pkcs#11 module should gateway to do this by editing the openssl configuration file, using engine specific controls, or using the p11 kit proxy module guardian integration the {{guard}} introduces mission critical viability to core cryptographic infrastructure, including centralization of device management elimination of points of failure distribution of transaction loads group specific function blocking user defined grouping systems see the applicable guide in the {{futurex}} portal for configuring hsms with the {{guard}} , including pkcs #11 and cng configuration