Installing PKCS#11 for CyberArk PAM
Install the latest version of Primus PKCS#11 provider on the device with the CyberArk Privileged Access Manager Vault Server already installed.
info
The examples in this guide refer to a Windows Server platform.
Temporarily disable/enable Server Hardening
Please follow the next steps to temporarily disable the CyberArk hardening to install the Primus HSM PKCS#11 provider:
- Navigate to
Services Management. - Enable and start the
Windows Module Installerservice. - Start the windows
Registry Editor. - Locate the
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\msiserverentry. - Back up the
Startentry. - Change the value of the
Startentry to3. - Restart the
CyberArk Vault Server. - Navigate to
Services Managementand start theWindows Installer service.
You can now Install the Primus HSM PKCS#11 provider. To reenable hardening please follow the next steps:
- Navigate to
Services Management. - Stop and disable the
Windows Module Installer service. - Stop and disable the
Windows Installer service. - Start the windows
Registry Editor. - Locate the
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\msiserverentry. - Change the value of the Start entry to
4.
The device is now ready for the Primus PKCS#11 provider to be installed.
Installation of Primus PKCS#11 Provider
Install the Primus PKCS#11 Provider on all CyberArk PAM Digital Vault machines.