Configuring Your System to Use Hardware Security Modules
The nCipher PKCS #11 library is located at the following file system directory
locations for typical installations:
Troubleshooting Using Hardware Security Modules
To detect whether the module is being used, you can turn on Oracle Net tracing. If
the wallet contains PKCS #11 information and the private key on the module is
being used, then you will see the following entries in the Oracle Net tracing file
without error messages logged between entry and exit:
nzpkcs11_Init: entry
nzpkcs11CP_ChangeProviders: entry
nzpkcs11CP_ChangeProviders: exit
nzpkcs11GPK_GetPrivateKey: entry
nzpkcs11GPK_GetPrivateKey: exit
nzpkcs11_Init: exit
...
nzpkcs11_Decrypt: entry
nzpkcs11_Decrypt: exit
nzpkcs11_Sign: entry
nzpkcs11_Sign: exit
7-50 Oracle Database Advanced Security Administrator's Guide
(UNIX) /opt/nfast
(Windows) C:\nfast
(UNIX 32 bit): /opt/nfast/toolkits/pkcs11/libcknfast.so
(UNIX 64 bit): /opt/nfast/toolkits/pkcs11/libcknfast-64.so
(Windows): C:\nfast\toolkits\pkcs11\cknfast.dll
Use the 32-bit library version when using the 32-bit release
Note:
of Oracle Database and use the 64-bit library version when using
the 64-bit release of Oracle Database. For example, use the 64-bit
nCipher PKCS #11 library for the Oracle Database for Solaris
Operating System (SPARC 64-bit).
Oracle Net Services Administrator's Guide for information
See Also:
about setting tracing parameters to enable Oracle Net tracing
Need help?
Do you have a question about the Oracle Database B10772-01 and is the answer not in the manual?