Quick Start
This quick start guide provides a comprehensive task listing to download, set up and use the Securosys Primus CNG/KSP Provider. For more detailed instructions consult the Installation and Tutorial section.
Before you begin
Before starting with the installation please ensure the Prerequisites are met.
Quick GUI install
Download the latest CNG/KSP Provider from the Securosys support portal (see Download). Copy the zip file to your server or client and extract the archive.
Select the appropriate MSI setup package according to your Windows System type (x86, x64). Double-click the MSI package to begin the interactive installation.
Click Next
.
Click Next
to leave the default installation folder or adapt it according to your needs.
then click Install
to start the installation.
Click Finish
to complete the installation and to launch the configuration GUI.
After successful installation, the "Securosys Primus HSM Key Storage Provider" should be listed when executing the following command as administrator:
certutil -csplist
Configure KSP
Run the Securosys "Key Storage Provider Configuration" tool from the Windows menu:
From the Provider pull-down menu select the provider instance to configure (in case multiple instances are installed).
Add all redundant HSM connections of the cluster with their fallback priority.
Click New
to add a new HSM connection.
Fill in all the required parameters, user partition credentials and, if required, the proxy credentials (e.g. for Clouds HSM), provided by your Security Officer or your Clouds HSM service provider or see Default HSM Connection Parameters.
Configure all your further redundant HSM connections (and provider instances) in the same way.
Click Test all Connections
to verify connectivity to your HSMs and to retrieve the permanent secret (if not done previously).
The status indicators should change to green after a successful connection. The CNG/KSP Provider is now ready for use by the applications.