Using External Encryption Modules
•
FIPS-140
You will need to add the PKCS #11 module before activating the FIPS-140
encryption standard.
Installing the PKCS#11 Module
Enterprise Server supports Public Key Cryptography Standard (PKCS) #11, which
defines the interface used for communication between SSL and PKCS#11 modules.
PKCS#11 modules are used for standards-based connectivity to SSL hardware
accelerators. Imported certificates and keys for external hardware accelerators are
stored in the
installed.
Using modutil to Install a PKCS#11 Module
You can install PKCS#11 modules in the form of
modutil
To install the PKCS#11 module using
Make sure all servers, including the Administration server, are turned off.
1.
Go to the
2.
Add
3.
Locate
4.
Set the environment. For example:
5.
Enter the command:
6.
The options will be listed.
116
Netscape Enterprise Server Administrator's Guide • April 2002 (Draft)
file, which is generated when the PKCs#11 module is
secmod.db
tool.
server_root/alias directory
server_root/bin/https/admin/bin
in
server_root/bin/https/admin/bin
modutil
On UNIX:
setenv
LD_LIBRARY_PATH server_root/bin/https/lib:${LD_LIBRARY_PATH}
On HP-UX:
SHLIB_PATH
On Windows NT/Windows 2000, add it to the
LD_LIBRARY_PATH server_root/bin/https/bin
You can find the PATH for your machine listed under:
server_root/https-admin/start
modutil
files or object files using the
.jar
, perform the following steps:
modutil
containing the databases.
to your PATH.
.
.
.
PATH
Need help?
Do you have a question about the NETSCAPE ENTREPRISE SERVER 6.1 - 04-2002 ADMINISTRATOR and is the answer not in the manual?
Questions and answers