Installing PKCS#11 on the Workstation

The installation file for the PKCS#11 is located on the Product CD. The installer creates an environment variable called CS_PKCS11_R2_CFG or CS_PKCS11_R3_CFG, depending on target version. It will contain the path to Utimaco’s PKCS#11 configuration file. This file must be created or copied into place and edited.

We must set the CS_PKCS11_R<vers>_CFG environment variable to point to this location. To be able to access the HSM via PKCS#11, the configuration file needs to be modified.

1. Set the path to the logfile and set the desired log level.

[Global] # For unix: #Logpath = /tmp # For windows:  

Logpath = C:/ProgramData/Utimaco/PKCS11_R<vers> 

# Loglevel (0 = NONE; 1 = ERROR; 2 = WARNING; 3 = INFO; 4 = TRACE) Logging = 4 

2. Set the IP address of the HSM.

[CryptoServer]
# Device specifier (here: CryptoServer is CSLAN with IP address 10.10.20.200)   
Device = 288@10.10.20.200  

3. Optionally, make additional modifications to the configuration file, such as setting up an external store as described in [CSPKCSM]. We suggest modifying the PKCS#11 config file to KeepAlive flag active.

[Global] 

# Prevents expiring session after inactivity of 15 minutes 

KeepAlive = true