Prerequisites
Make sure to adhere to the below listed prerequisites as they are paramount to continuing with the guide.
- OpenJDK 8
- EJBCA Enterprise 7.x, 8.x or EJBCA community edition 6.x, 7.x, 8.x
- JbossEAP 7.2 or newer
- Securosys PKCS#11 Provider v1.8.x or newer
- CloudHSM Service (HSM as a Service) or Primus HSM, firmware v2.8.21 or newer
- PKCS#11 API licensed
HSM Setup and Configuration
- Securosys CloudHSM
- Securosys Primus HSM (on-premises)
Securosys CloudHSM allows almost instant HSM operation by selecting and contracting the different services and options for your Keyfactor/PrimeKey EJBCA. For available service packages and options consult our website Securosys CloudHSM Service and contact Securosys sales.
Ensure the PCKS#11 API is included and activated in your subscription.
Consult Primus HSM PKCS#11 Provider User Guide - Primus HSM Configuration to setup the Primus HSM for PKCS#11 usage.
Ensure the PCKS#11 API is licensed and activated on your device.
For general on on-premises Primus HSM hardware, HA Cluster setup and operation in FIPS or Common Criteria certified modes, refer to the corresponding Primus HSM User Guide for details.