Before you start

4min

Before you start configuring this integration, ensure you meet the following prerequisites:
Supported hardware:
KMES Series 3 version 6.3.x.x or later with Futurex-signed TLS certificates preloaded
TLS client certificates to enable the Futurex PKCS #11 (FXPKCS11) library to connect with the KMES Series 3. For more information, see the KMES Series 3 TLS certificates, FXPKCS11 certificates, and the FXPKCS11 configuration file sections.
Futurex PKCS #11 (FXPKCS11) library version 4.34 or later
Supported operating systems:
Linux Server (Rocky Linux 8 for this example – GUI not required): https://rockylinux.org/download/ 
Windows 10 or later
Other tools:
OpenSSL for Linux (if using Linux)
Oracle Database 19c
Installation Guide for Oracle Database 19c: https://docs.oracle.com/en/database/oracle/oracle-database/19/index.html﻿
Oracle Guide to securing data with Oracle TDE (General concepts – how to enable TDE): https://docs.oracle.com/en/database/oracle/oracle-database/19/asoag/introduction-to-transparent-data-encryption.html﻿
Oracle Guide to use HSM with TDE: https://docs.oracle.com/en/database/oracle/oracle-database/19/asoag/configuring-transparent-data-encryption.html#GUID-753C4808-CC51-4DA1-A5C3-980417FDAB14﻿
﻿
This guide assumes that you are running the server, have root permissions, and already installed the Oracle database with the necessary configurations to support TDE.
﻿

Oracle Database TDE

Configure the Futurex PKCS #11 library in Oracle