Install Futurex PKCS #11

you must install the {{futurex}} pkcs #11 module on the computer or server where you plan to install cyberark privileged access solution t he following process installs only the hsm version of the pkcs #11 configuration file for {{k}} integrations, you need to replace the \<hsm> section with a \<kms> section install fxpkcs11 on the same computer as the application for the integration select your operating system and perform the following steps to install {{futurex}} pkcs #11 windows perform the following steps to install {{futurex}} pkcs #11 in windows in a windows environment, the easiest way to install the {{futurex}} pkcs #11 module is to download fxtools from the {{futurex}} portal and install it after you download fxtools , run the installer as an administrator by default, the system installs all tools you can overwrite and choose not to install the following modules module description futurex client tools command line interface (cli) and associated sdk for both java and c futurex cng module the microsoft next generation cryptographic library futurex cryptographic service provider (csp) the legacy microsoft cryptographic library futurex ekm module the microsoft enterprise key management library futurex pkcs #11 module the {{futurex}} pkcs #11 library and associated tools futurex secure access client the client that connects a {{futurex}} excrypt touch to a local laptop with a usb or to a remote {{futurex}} device after starting the installation, the system installs all noted services if you selected the {{futurex}} secure access client, the excrypt touch driver is also installed and might start minimized or in the background the installation installs all services in the c \program files\futurex directory the cng module , csp module , ekm module , and pkcs #11 module all require configuration files, located in their corresponding directory with a cfg extension linux perform the following steps to install {{futurex}} pkcs #11 in linux for a linux environment, download the tarball of the pkcs #11 binaries from the {{futurex}} portal extract the tar file locally where you want to install the application on your file system for the {{futurex}} pkcs #11 module to be accessible system wide, an administrative user must place it in /usr/local/bin if only the current user needs to use the module, then installing into $home/bin is appropriate the extracted content of the tar file is a single fxpkcs11 directory this directory contains the following files and directories (only the files and folders relevant to the installation process are included in this list) file name or directory description fxpkcs11 cfg pkcs #11 configuration file to use for hsm integrations fxpkcs11 kms cfg (you might not need this file ) pkcs #11 configuration file to use for {{k3}} integrations x86/ this folder contains the module files for 32 bit architecture x64/ this folder contains the module files for 64 bit architecture the x86 and x64 directories contain multiple directories named for the specific openssl versions these openssl directories contain the pkcs #11 module files built with the respective openssl versions file name description configtest program to test the configuration and connection to the hsm libfxpkcs11 so pkcs #11 library file pkcs11manager program to test the connection and manage the hsm through the pkcs #11 library the configtest and pkcs11manager programs look for the pkcs #11 configuration file in the /etc directory you must either move the file from the /usr/local/bin/fxpkcs11 directory to the /etc directory or set the fxpkcs11 cfg environment variable to point to it if using the {{k}} version of the pkcs #11 configuration file ( fxpkcs11 kms cfg ), you must rename the file to fxpkcs11 cfg