Introduction

This guide is part of the information and support provided by Utimaco. Additional documentation produced to support your Utimaco SecurityServer product can be found in the document directory of the Utimaco SecurityServer product bundle.

All Utimaco SecurityServer product documentation is available from Utimaco’s website at https://utimaco.com/.

About This Guide

This guide provides an integration guide explaining how to integrate a Utimaco SecurityServer Hardware Security Module (HSM) with OpenVPN. Utimaco SecurityServer securely generates and stores the private key and certificate of a client used by OpenVPN for authentication.

Target Audience for This Guide

This guide is intended for administrators of OpenVPN and of Utimaco HSMs.

Document Conventions

The following conventions are used in this guide:

Convention

Use

Example

Bold

Items of the Graphical User Interface (GUI), e.g., menu options

Select Details and click on Properties button

Monospaced

Code that is given for explanation or as an example, file paths

certreq.exe -new request.inf IISCertRequest.csr

Italic

References and important terms

Operating system listed in Tested Versions

Document conventions

We use special icons to highlight the most important notes and information.

Here you will find important safety information that should be followed.

Here you will find additional notes or supplementary information.

This message marks the result expected after the successful execution of an instruction.

Abbreviations

The following abbreviations are used in this guide:

Abbreviation

Meaning

CA

Certificate Authority

CD

Compact Disc

CSADM

CryptoServer Command-line Administration Tool

CSR

Certificate Signing Request

GUI

Graphical User Interface

HSM

Hardware Security Module

IP

Internet Protocol

LAN

Local Area Network

MBK

Master Backup Key

P11CAT

PKCS#11 CryptoServer Administration Tool

PCIe

PCI Express Interface

PIN

Personal Identification number

PKI

Public Key Infrastructure

PKCS#11

Public-Key Cryptography Standard #11

RSA

Rivest-Shamir-Adleman

SO

Security Officer

SSL

Secure Socket Layer

TLS

Transport Layer Security

URL

Uniform Resource Locator

VPN

Virtual Private Network

List of abbreviations