ZetaCA is deployed as Docker containers. To enable HSM integration:
-
Extract the ZetaCA package:
tar xzf zetaca-v1.0.0.tar.gz && cd zetaca -
Mount the Utimaco PKCS#11 R3 library in
docker-compose.yml:volumes: /opt/utimaco/lib/libcs_pkcs11_R3.so:/usr/lib/libcs_pkcs11_R3.so:ro /etc/utimaco/cs_pkcs11_R3.cfg:/etc/utimaco/cs_pkcs11_R3.cfg:ro -
Set environment variables.
CS_PKCS11_R3_CFG=/etc/utimaco/cs_pkcs11_R3.cfg -
Start ZetaCA:
docker compose up -d
ZetaCA administration login page
-
Open https://<hostname>/sysadmin/ and navigate to HSM > Add HSM Configuration.
ZetaCA administration dashboard
-
Enter: Name, PKCS#11 Library (
/usr/lib/libcs_pkcs11_R3.so), Slot (0), PIN (activated User PIN), Provider Config (/etc/utimaco/cs_pkcs11_R3.cfg).
ZetaCA HSM management page showing registered PKCS#11 configurations
Edit Utimaco v6.4 Simulator HSM configuration.
Successful HSM connectivity test