Configure Utimaco PKCS#11 Provider with Big-IP

1. To start with, login to the Configuration utility of F5 Big-IP from the browser

2. On the Left Pane go to System > Certificate Management > HSM Management > External HSM

3. Now in the General Properties, click on the dropdown and select the Vendor as auto and set the PKCS11 Library Path to /opt/utimaco/lib/libcs_pkcs11_R3.so

4. In the Partitions, create a new Partition with the Name as auto & Password as 123456

5. Click on Add to save credentials button and then click on Finished button at the bottom

Figure 1: External HSM Management