Configuring the OpenSSL Configuration File

  1. Open the file /etc/pki/tls/openssl.cnf on Linux or C:\Program Files\Common Files\SSL\openssl.cnf on Windows and enter the following line in the first line of the file.

›_ Console

openssl_conf = openssl_init
  1. Enter the following lines under the last section of the openssl.cnf file.

›_ openssl.cnf

[openssl_init]
providers=provider_sect

[provider_sect]
default = default_sect
pkcs11 = pkcs11_sect

[default_sect]
activate = 1

[pkcs11_sect]
module = /usr/lib/x86_64-linux-gnu/ossl-modules/pkcs11.so
pkcs11-module-path = /opt/utimaco/lib/libcs_pkcs11_R3.so
pkcs11-module-login-behavior = always
activate = 1

The dynamic path and module path will be changed according to the user environment.

On Linux, dynamic_path must point to pkcs11.so. On Windows, it must point to pkcs11.dll.

In both environments, dynamic_path must point to the SecurityServer PKCS#11 provider.