Quick Start

This quick start guide provides a comprehensive task listing to download, set up and use the Securosys Primus CNG/KSP Provider. For more detailed instructions consult the Installation and Tutorial section.

Before you begin

Before starting with the installation please ensure the Prerequisites are met.

Quick GUI install

Download the latest CNG/KSP Provider from the Securosys support portal (see Download). Copy the zip file to your server or client and extract the archive.

Select the appropriate MSI setup package according to your Windows System type (x86, x64). Double-click the MSI package to begin the interactive installation.

Click Next.

Click Next to leave the default installation folder or adapt it according to your needs.

then click Install to start the installation.

Click Finish to complete the installation and to launch the configuration GUI. After successful installation, the "Securosys Primus HSM Key Storage Provider" should be listed when executing the following command as administrator:

certutil -csplist

Configure KSP

Run the Securosys "Key Storage Provider Configuration" tool from the Windows menu:

From the Provider pull-down menu select the provider instance to configure (in case multiple instances are installed).

Add all redundant HSM connections of the cluster with their fallback priority.

Click New to add a new HSM connection.

Fill in all the required parameters, user partition credentials and, if required, the proxy credentials (e.g. for Clouds HSM), provided by your Security Officer or your Clouds HSM service provider or see Default HSM Connection Parameters.

Configure all your further redundant HSM connections (and provider instances) in the same way.

Click Test all Connections to verify connectivity to your HSMs and to retrieve the permanent secret (if not done previously).

The status indicators should change to green after a successful connection. The CNG/KSP Provider is now ready for use by the applications.