Edit the Futurex CNG (FXCNG) configuration file
The fxcng.cfg file enables you to set the FXCNG library to connect to the KMES Series 3. To edit, run a text editor as an Administrator and modify the configuration file accordingly. Most notably, you must set the following fields in the <KMS> section (note that the full fxcng.cfg file is not shown).
Our CNG library expects the CNG config file to be in a certain location (C:\Program Files\Futurex\fxcng\fxcng.cfg).
Field
Description
<SLOT>
Can leave set to the default value of 0.
<CRYPTO-OPR>
Specify the name of the identity created on the KMES.
<CRYPTO-OPR-PASS>
Specify the password for the user configured in the <CRYPTO-OPR> field.
<ADDRESS>
Specify the IP address of the KMES to which the CNG library should connect.
<LOG-FILE>
Set the path of the CNG log file.
<PROD-PORT>
Set the CNG library to connect to the default Host API port on the KMES, port 2001.
<PROD-TLS-ENABLED>
Set the field to YES. The only way to connect to the Host API port on the KMES is over TLS.
<PROD-TLS-ANONYMOUS>
Set this value to NO because you're connecting to the Host API port by using mutual authentication. This field defines whether the CNG library authenticates to the KMES.
<PROD-TLS-CA>
Because a PKCS #12 file is defined in the <PROD-TLS-KEY> field in this example, it is not necessary to define the CA certificates with one or more instances of the <PROD-TLS-CA> tag.
<PROD-TLS-CERT>
Because a PKCS #12 file is defined in the <PROD-TLS-KEY> field in this example, you don't need to define the signed client cert with the <PROD-TLS-CERT> tag
<PROD-TLS-KEY>
Set the location of the client private key. Supported formats for the TLS private key are: PKCS #1 clear private keys, PKCS #8 encrypted private keys, or a PKCS #12 file that contains the private key and certificates encrypted under a password.
<PROD-TLS-KEY-PASS>
Set the password of the PKCS #12 file.
<FX-LOAD-BALANCE>
Set this field to YES if you use a Guardian to manage KMES Series 3 devices in a cluster. If you don't use a Guardian, set it to NO.
For additional details, see the Futurex CNG technical reference on the Futurex Portal.