Quick Reference

this section offers a quick reference to key prerequisites and high level implementation steps for basic testing procedures for the integration, see validate and test docid\ ectjbwfeo5jnq9bfincvn pre implementation install ansible admin privileges on the hsm check openssl version (v3 0 or newer) install dependencies opensc (from source or with package manager under opensc ) implementation you can complete most tasks in this section by using either excrypt manager or fxcli the exception is the second option of task 7 ( create connection certificates for mutual authentication ), for which you must use fxcli you can optionally complete steps 4 through 6 by using the {{guard}} (see the applicable guide for configuring hsms for pkcs #11 integrations by using the {{guard}} ) if you use a virtual hsm for the integration, you must connect to it over the network through fxcli, the excrypt touch, or the {{guard}} install {{futurex}} pkcs #11 module ( fxpkcs11 ) install {{futurex}} command line interface ( fxcli ) configure vectera connect to the hsm with a usb to enable excrypt manager or fxcli confirm command primary mode is general purpose (gp) , and pkcs #11 feature is enabled configure hsm's network load {{ftk}} , {{pmk}} and {{bek}} major keys configure the transaction processing connection create a new application partition for the integration create a new identity and give it access to the newly created application partition configure tls with either server side or mutual authentication edit fxpkcs11 configuration file install and configure {{pkcs11 provider}} post implementation set up test environment generate a key pair in the hsm create a password file create a test txt file with sample data copy encrypt yml and decrypt yml playbooks into the test directory create an inventory file run the example encrypt yml and decrypt yml playbooks to demonstrate the hsm's role in ansible vault integration