Quickstart

1. Get started with the installation.

2. If the PKCS#11 API is already configured on your HSM, you can skip ahead to the provider installation.

3. Once installation is complete, proceed with the provider configuration and permanent secret fetching.

Installing the provider is only the first step. The Primus PKCS#11 Provider can be seamlessly integrated into existing applications as well as provide an easy to use interface to manage cryptographic keys in your own application.

Group Concept

By default, the PKCS#11 provider files (libraries, executables, configuration) are assigned to the 'primus' group. Any user or application account intending to use the provider must be added to this group to access the necessary files.

Check whether the user account is part of the PKCS#11 provider group, using the groupscommand. If the account is not a member of the required group, add it by executing sudo usermod -a -G providergroup username, e.g.

Adding a user to a new group may require logout/login or reboot to update permissions (as temporary workaround you may use newgrp primus or sudo login -f <user>).