Prerequisites

Before you begin, please ensure that:

• The SecurityServer is set up and configured. Refer to the SecurityServer documentation to set up the HSM.

• The MBK has been created and stored onto each HSM. Refer to the SecurityServer documentation to set up the MBK.

• The SecurityServer Default Admin has been replaced with a new admin user.

• The operating system used is listed in Tested Versions.

• The SQL Server is listed in Tested Versions.

• The SQL Server Management Studio has been set up.

• The SecurityServer is listed in Tested Versions with SecurityServer CNG provider.

• A cryptographic user has been set up on that SecurityServer.

You should also be familiar with SQL statements, as this guide makes intensive use of them.

After the successful SecurityServer setup, you should find these files on your system for use with the SecurityServer CNG provider:

• cs2cng.dll and cs2csp.dll

The former is the provider library that will be loaded into the SQL Server, and the latter is required by it. These files are located in C:\Windows\SysWOW64,which must be in system PATH.

• cs_cng.cfg

This file contains the parameters that the SecurityServer CNG provider will use when communicating with the HSM. Please see the next sections for details.