The following section outlines the procedures required to configure both the Utimaco HSM and JSign components for seamless integration.
Create users SO (Security Officer) and USR (the Crypto user) accounts and initialize a slot.
The slot must be initialized using the p11tool2.
First, create the SO using p11tool2. Then, using the p11tool2 command, initialize the slot you want to use and the slot user, as shown below.
-
# ./p11tool2 slot=<slot no.> Label=<token label> Login=ADMIN,ADMIN.key InitToken=<SO pin>
Initialize the SO user.
-
# ./p11tool2 slot=<slot no.> LoginSO=<SO pin> InitPin=<Cryptouser pin>
Ensure that the Utimaco u.trust GP HSM is reachable and accessible from the system where JSign is installed.