Breadcrumbs

On Linux

  1. Create the directory /etc/utimaco. We will copy the Utimaco PKCS#11 configuration file cs_pkcs11_R3.cfg into this directory. It is located in your CryptoServer-V4.45.3.0 installer directory, Linux/x86-64/Crypto_APIs/PKCS11_R3/sample.

›_ Console 

# mkdir /etc/utimaco
# cd <install directory>/Software/Linux/x86-64/Crypto_APIs/PKCS11_R3/sample
# cp cs_pkcs11_R3.cfg /etc/utimaco
# cd /etc/utimaco

  1. Edit the cs_pkcs11_R3.cfg file located at /etc/utimaco/ and make the appropriate changes to the file.

As a best practice, cs_pkcs11_R3.cfg should be owned by the user or service group, not by root.

  1. Create utimaco folder under /opt directory and further create 2 directories; /opt/utimaco/bin and /opt/utimaco/lib.

  2. Copy pkcs11 library file libcs_pkcs11_R3.so from Utimaco CryptoServer software to the /opt/utimaco/lib directory and make the file executable.

›_ Console 

# mkdir -p /opt/utimaco/bin && mkdir /opt/utimaco/lib 
# chmod +x /opt/utimaco/lib/libcs_pkcs11_R3.so

  1. Copy the csadm and p11tool2 files from Utimaco CryptoServer software to /opt/utimaco/bin directory and make both the files executable.

›_ Console 

# cd ~/path_to_application_folder/ && cp csadm p11tool2 /opt/utimaco/bin 
# chmod +x /opt/utimaco/bin/csadm
# chmod +x /opt/utimaco/bin/p11tool2

  1. Create pkcs11.cfg at location /etc/utimaco/.

›_ Console 

# touch /etc/utimaco/pkcs11.cfg

  1. Add the content below to the pkcs11.cfg.

›_ pkcs11.cfg

 
name=CryptoServer 
library=/opt/utimaco/lib/libcs_pkcs11_R3.so 
slot=0
attributes=compatibility 
attributes(*,*,*) = { 
CKA_TOKEN = true
}