Edit the Futurex PKCS #11 configuration file
The fxpkcs11.cfg file enables you to set the FXPKCS #11 library to connect to the . To edit the file, run a text editor as an Administrator on Windows or root on Linux and edit the configuration file accordingly. Most notably, you must configure the fields described in this section inside the <KMS> section of the file.
Our PKCS #11 library expects to find the PKCS #11 config file in a certain location (C:\Program Files\Futurex\fxpkcs11\fxpkcs11.cfg for Windows and /etc/fxpkcs11.cfg for Linux), but you can override that location by using the FXPKCS11_CFG environment variable.
To configure the fxpkcs11.cfg file, edit the following sections:
Field
Description
<SLOT>
Can leave it set to the default value of 0.
<KEYGROUP-NAME>
Define the symmetric key group name for this integration.
<ASYM-KEYGROUP-NAME>
Define the asymmetric key group name for this integration.
<LOG-FILE>
Set the path of the PKCS #11 log file.
<PROD-PORT>
Set the PKCS #11 library to connect to the default Host API port on the KMES, port 2001.
<PROD-TLS-ENABLED>
<PROD-TLS-ANONYMOUS>
<PROD-TLS-CA>
Comment out this field because the client PKI is all contained within a PKCS #12 file.
<PROD-TLS-CERT>
Comment out this field because the client PKI is all contained within a PKCS #12 file.
<PROD-TLS-KEY>
Set the location of the client PKCS #12 file, encrypted under the password specified in the <PROD-TLS-KEY-PASS> field, which you must define.
<PROD-TLS-KEY-PASS>
Set the password of the PKCS #12 file.
<FX-LOAD-BALANCE>
After you finish editing the fxpkcs11.cfg file, run the PKCS11Manager file to test the connection against the and check the fxpkcs11.log for errors and information. For more information, refer to the PKCS #11 technical reference on the Portal.
The Zettaset integration requires the following special defines in the <CONFIG> section of the fxpkcs11.cfg file: