Breadcrumbs

Update cs_pkcs11_R3.cfg

  1. Locate the Utimaco PKCS#11 configuration file cs_pkcs11_R3.cfg in your u.trust GP HSM software in directory Linux/x86-64/Crypto_APIS/PKCS11_R3/sample. Copy the configuration file into /opt/utimaco directory.

  2. Edit the cs_pkcs11_R3.cfg file and make the appropriate changes to the file.

Installing and Configuring Utimaco u.trust GP HSM Software

tmp6fzktj4w.jpg

Figure 1 : cs_pkcs11_R3.cfg


The device may be a u.trust GP HSM PCIe or LAN device or u.trust GP HSMaaS. The device line will follow one of these patterns, based on the HSM form factor. Device = 4001@<HSM IP address> for LAN HSM or HSMaaS

OR

Device = /dev/cs2.0 for PCIe HSM

To make your testing easier, it would be good to enable the PKCS#11 log file. That can be enabled by editing the Logging log level and Logpath. Set Logging to 4 and specify the LogPath. The LogPath points to a writable directory, not to a file.

If you encounter problems, check the log file named cs_pkcs11_R3.log in the LogPath directory. When you are done testing, you should change Logging to 1 or 2. This will limit the logging to only critical and important messages.