Prerequisites

Before you begin, please ensure that you have installed/setup:

  • Operating system listed in Tested Versions

  • SQL Server listed in Tested Versions

  • SQL Server Management Studio

  • SecurityServer listed in Tested Version with CryptoServer SQLEKM provider 

  • CryptoServer (PCIe or LAN) with MBK loaded 

  • A cryptographic user on that CryptoServer 

You should also be familiar with SQL statements, as this guide makes intensive use of them.

For more information consult the CryptoServer Manual for System Administrators.

After the successful SecurityServer setup, you should find these files on your system for use with the CryptoServer SQLEKM provider:

  • cssqlekm.dll and cssqlekmlib.dll

    The former is the provider library that will be loaded into SQL Server, and the latter is required by
    it. These files are located in C:\Program Files\Utimaco\CryptoServer\Lib\, which must be in system PATH.

  • cssqlekm.cfg
    This file contains the parameters that the CryptoServer SQLEKM provider will use when communicating with the HSM. Please see the next sections for details.

Before SecurityServer release 4.30 the location of the EKM DLLs was not added to the system PATH if only the EKM API was selected in the installation wizard. Workaround: Also install the PKCS#11 API or add the location manually. Restart the computer afterwards.