HSM specifics

nCipher nShield Connect

To integrate the nCipher nShield Connect HSM, the cknfastrc configuration file must be updated with the following configuration entry:

CKNFAST_FAKE_ACCELERATOR_LOGIN=Y

Utimaco CryptoServer

To integrate the Utimaco CryptoServer, the ocspd configuration file (/etc/default/ocspd) must be modified and the following lines lust be added at the beginning of the configuration file:

# Utimaco specific export
export CS_PKCS11_R2_CFG=[CS_PKCS11_R2]

Where [CS_PKCS11_R2] is the absolute path of the cs_pkcs11_R2.cfg configuration file.

The [CS_PKCS11_R2] configuration file must be updated as well to enable a session keep alive:

# Prevents expiring session after inactivity of 15 minutes
KeepAlive = true