Prerequisites for Microsoft AD CS

• Windows Server 2016 or higher,
• Securosys Primus HSM or CloudHSM firmware v2.8.21 or higher,
• Securosys CNG/KSP Provider v1.45.2 or higher installed and configured

PQC Support

For PQC algorithms Securosys CNG/KSP Provider v1.60 or higher must be installed and configured.

HSM setup and configuration

Cloud

With Securosys CloudHSM, the HSM are already configured, no further action needed.

• CloudHSM Economy (ECO)
• CloudHSM Sandbox (SBX)

On-premise

Before we proceed with the installation and configuration of the Microsoft AD CS, it is required to configure the Securosys on-premise Primus HSM.

This guide does not cover the initial setup of the Primus HSM. Follow the procedures outlined in Chapter 3 of the Primus HSM User Guide. Ensure that the Primus HSM is updated to the following firmware:

• Primus HSM Firmware v2.8.43 or higher.

You can download the Securosys Primus HSM firmware from the Securosys Support Portal.

After completing the initial setup (running the initial wizard), ensure that the HSM has the correct network configuration and can be accessed from the host device.

Continue to install the CNG provider.