Install and configure Futurex PKCS #11

1 min

install fxpkcs11 on the same computer as the application that integrates with the kmes series 3 perform the following steps to install {{futurex}} pkcs #11 for a linux environment, download the tarball of the pkcs #11 binaries from the {{futurex}} portal e xtract the tar file locally where you want to install the application on your file system for the {{futurex}} pkcs #11 module to be accessible system wide, an administrative user must place it to /usr/local/lib if only the current user needs to use the module, then installing it to $home/lib is appropriate the extracted content of the tar file is a single fxpkcs11 directory this directory contains the following files and directories (only the files and folders relevant to the installation process are included in this list) file name or directory description fxpkcs11 cfg pkcs #11 configuration file to use for hsm integrations fxpkcs11 kms cfg pkcs #11 configuration file to use for {{k3}} integrations you must rename this file to fxpkcs11 cfg and configure it for the connection x86/ this folder contains the module files for the 32 bit architecture x64/ this folder contains the module files for the 64 bit architecture the x86 and x64 directories contain multiple directories named for the specific openssl versions these openssl directories contain the pkcs #11 module files built with the respective openssl versions as of july 2025, futurex doesn't support openssl 3 x on x84 (32 bit) systems file name description configtest program to test the configuration and connection to the hsm libfxpkcs11 so pkcs #11 library file pkcs11manager program to test the connection and manage the hsm through the pkcs #11 library the configtest and pkcs11manager programs look for the pkcs #11 configuration file ( fxpkcs11 cfg ) in the /etc directory you must either move the file from the /usr/local/lib/fxpkcs11 directory to the /etc directory or set the fxpkcs11 cfg environment variable to point to it important y ou must use the {{k}} version of the pkcs #11 configuration file ( fxpkcs11 kms cfg ) rename the file to fxpkcs11 cfg and move it to the /etc directory or set the fxpkcs11 cfg environment variable to point to it