Skip to main content

Prerequisites

Before starting the process of integrating the Securosys CloudHSM or on-premises Primus HSM with the PKCS#11 Engine Plugin, please make sure to fulfill all the necessary requirements listed below:

  • Securosys PKCS#11 Provider v1.8.6 or newer
  • Securosys Hardware Security Modules (HSMs):
    • On-Premises Primus HSM with firmware v2.8.21, v2.10.5 or newer, with PKCS#11 API and Session Object support enabled; or
    • CloudHSM with PKCS#11 API and Session Object support enabled.

Securosys Hardware Security Module (HSM)

OpenSSL v1.x - OpenSC is compatible with Securosys HSMs, both on-premises and in the cloud.

Securosys CloudHSM allows almost instant HSM operation by selecting and contracting the different services and options.

PKCS#11 Engine Plugin Essentials

To successfully integrate and configure the PKCS#11 Engine Plugin with Primus HSMs, several essential components and tools are required. Below is a list of the necessary software and resources you will need to set up the environment and ensure smooth operation.

note

This guide is based on the following setup to ensure consistency and proper functionality. By using the same configuration, you can follow along smoothly and avoid potential issues during the integration process.

Here are the components and tools used:

SoftwareVersion
Primus HSM2.11
Primus PKCS#11 Provider2.2.2 (Windows 64-bit MSI installer)
Microsoft Visual StudioVisual Studio 2022
OpenSC PKCS11-tool0.25.1 (Windows 64-bit MSI installer)
OpenSSL3.3.2 (Windows 64-bit MSI installer from Shinning Light Productions)
OpenSC PKCS#11 Wrapper Librarylibp11-0.4.12