Install Futurex PKCS #11
Perform the following steps to install the PKCS #11 module on Linux:
For a Linux Environment, download the tarball of the PKCS #11 binaries from the Portal.
Extract the .tar file locally in the destination directory to install the application in your file system.
For the PKCS #11 module to be accessible system-wide, an administrative user should put it in /usr/local/bin. If only the current user needs to use the module, you can install it in $HOME/bin.
The extracted content of the .tar file is a single fxpkcs11 directory with the following files and directories (the list includes only files/folders that are relevant to the installation process):
Filename or directory
Description
fxpkcs11.cfg
PKCS #11 configuration file to use for HSM Integrations.
fxpkcs11-kms.cfg
PKCS #11 configuration file to use for KMES Series 3 integrations.
x86/
This folder contains the module files for 32-bit architecture.
x64/
This folder contains the module files for 64-bit architecture.
The x86 and x64 directories have multiple directories named for the specific OpenSSL versions. These OpenSSL directories contain the PKCS #11 module files, built with the respective OpenSSL versions.
File name
Description
configTest
Program to test configuration and connection to the HSM.
libfxpkcs11.so
PKCS #11 Library file.
PKCS11Manager
Program to test connection and manage the HSM through the PKCS #11 library.
The configTest and PKCS11Manager programs look for the PKCS #11 configuration file in the /etc directory. You must either move the file from the /usr/local/bin/fxpkcs11 directory to the /etc directory or set the FXPKCS11_CFG environment variable to point to the PKCS #11 configuration file.
If you use the version of the PKCS #11 configuration file (fxpkcs11-kms.cfg), you must rename the file to fxpkcs11.cfg.