Install Futurex PKCS #11 (FXPKCS11)
Perform the following steps to install the Futurex PKCS #11 module on the computer where you installed Venafi TPP:
In a Windows environment, the easiest way to install the Futurex PKCS #11 module is by using FXTools. Download FXTools from the Futurex portal to the computer that runs Venafi TPP.
Run the FXTools installer as an administrator.
By default, FXTools installs all tools on the system. You can overwrite the default and choose which of the following modules to install:
Module
Description
Futurex Client Tools
Command Line Interface (CLI) and associated SDK for both Java and C.
Futurex CNG Module
The Microsoft Next Generation Cryptographic Library.
Futurex Cryptographic Service Provider (CSP)
The Legacy Microsoft Cryptographic Libary.
Futurex EKM Module
The Microsoft Enterprise Key Management library.
Futurex PKCS #11 Module
The Futurex PKCS #11 library and associated tools.
Futurex Secure Access Client
The Client used to connect a Futurex Excrypt Touch to a local laptop through USB and a remote Futurex device.
The installation installs all selected services in the C:\Program Files\Futurex directory. If you selected the Futurex Secure Access Client, the Futurex Excrypt Touch driver also installs. It might start minimized or in the background.
The CNG, CSP, EKM, and PKCS #11 modules all require configuration files, located in their corresponding directory with a .cfg extension.
Because the system installs only the HSM version of the PKCS #11 configuration file, you need to replace the <HSM> section of the file with a <KMS> section to integrate with the KMES. To do this, go to the directory C:\Program Files\Futurex\ and delete the fxpkcs11.cfg file, then rename the fxpkcs11- kms.cfg file to fxpkcs11.cfg.