Quickstart

This guide provides an overview of how to set up and use the Primus CNG API provider.

Before starting the installation

Please ensure that all prerequisites are met.

1. Install the provider via the GUI

1. Download the latest CNG/KSP Provider (account required).

2. Copy the zip file to your server or client and extract the archive.

3. Select the appropriate MSI setup package according to your Windows System type (x86, x64).

4. Double-click the MSI package to begin the interactive installation.

   

5. Click Next.

   

6. Click Next to leave the default installation folder or adapt it according to your needs.

   

7. Click Install to start the installation.

   

8. Click Finish to complete the installation and to launch the configuration GUI. After successful installation, the "Securosys Primus HSM Key Storage Provider" should be listed when executing the following command as administrator:

   certutil -csplist

   

2. Configure the Key Storage Provider (KSP)

From the Windows menu, run the Securosys "Key Storage Provider Configuration":

1. If multiple instances are installed, choose the one want to configure one from the Provider drop-down list.

2. Add all redundant HSM connections of the cluster, as well as their fallback priority.

   

3. Click New to add a new HSM connection.

4. Fill in all the required parameters, including user partition credentials and, if required, the proxy credentials (e.g. for CloudHSM), as provided by your Security Officer (SO) or your CloudHSM service provider. See also the HSM Connection Parameters.

   

5. Configure all your further redundant HSM connections (and provider instances) in the same way.

6. Click Test all Connections to verify connectivity to your HSMs and to retrieve the permanent secret.

   

   The status indicators should change to green after a successful connection. The CNG/KSP Provider is now ready for use by the applications.

   

For more detailed instructions, please consult:

• the Installation section
• the Tutorials section