Setting Up AEP Keyper HSM

This section describes how to set up the AEP Keyper HSM for use with ActivID Key Management System (KMS) and ActivID Credential Management System (CMS).

To set up AEP Keyper HSM, you must perform the following tasks:

  1. You must install the AEP Keyper client. For detailed information, refer to AEP Keyper documentation.

  2. Initialize the HSM.

  3. Run ActivID KMS. For detailed information, refer to Installing and Using ActivID KMS .

Note: There is no specific configuration or customization rather than defining a Token name.

First, you must install the AEP Keyper client. For detailed information, refer to the AEP Keyper documentation.

To install the client, perform the following tasks:

  1. Click pkcs1132.msi (available from Ultra Electronics AEP).

    Machine generated alternative text: AEP PKCS 11 Provider vS.02 3zbit Welcome to the AEP PKCS1 1 Provider v502 32bit Setup Wizard The installer will guide you through the steps required to install AEP PKCS1 1 Provider v5,02 32bit on your computer. WARN INS: T his computer program is protected by copyright law and international treaties. Unauthorized duplication or distribution of this program, or any portion of it. may result in severe civil or criminal penalties, and will be prosecuted to the maximum extent possible under the law. Cancel <Back Next>

    The Welcome page appears.

    Machine generated alternative text: jAEP PKCS 11 Provider v5.02 3zbit I11 I P Configuration Ultra ELECTRONKS Enter Keyper Network Address IP Address: 1101633.174 port: 15000 Cancel <Back Next>

  2. Enter the IP Address and Port number, and click Next.

    Machine generated alternative text: r5JÃEP PKCS1 1 Provider vS.02 3zbit License Agreement Plut’ ELÆCTRONKS Please take a moment to read the license agreement now. If you accept the terms below, click “I Agree”, then “Next”. Otherwise click “Cancel”. Software License and Limited Product Warranty for Supplier Licensed Products Byinstalling orusingthe AEP Software containedinthis package, youwillbe deemed to have read and accepted all the terms of this License and you shall become the Licensee of the Software. Such acceptance binds you and (where you are installing this software on behalf of an organization, your organization and all of its employees who make use of the software) to the terms of this License. If you r I Do Not Agree C I Agree Cancel <Back Next>

  3. On the License Agreement page, select I Agree, and then click Next.

    Machine generated alternative text: w z: 9Browse_For Folder Browse: ( PKCSllProvider j The installer will install AEP PI( To install in this lolder, click “is Lolder: folder: IC:\AEPKeyper\PKCS1 1 Provider\ OK Cancel Cancel Next>

  4. Browse and select the folder to install the client.

    Machine generated alternative text: PKCS1 1 Provider vS.02 3zbit Select Installation Folder The installer wdl install AEP PKCS11 Provider v5.02 32bit to the Following Folder. To install in this Folder, click ‘Next’. To install to a difFerent folder, enter it below or click ‘Browse’. folder: I C: \4E PKeyper\PKCS 11 Provider\ Browse... Disk Cost... Cancel Next>

  5. Click Next.

  6. To use the client, add environment properties as follows:

    Copy 
    set environment variable KEYPER_LIBRARY_PATH=<INSTALLATION_DIR>

Initializing an HSM creates the HSM security officer account (also known as the administrator) and requires that a password be created and assigned to that account.

To initialize HSM, perform the following tasks:

  1. Navigate to the directory where you installed AEP Keyper HSM. By default, the directory location is C:\Program Files\AEPKeyper and run InitToken.exe.

  2. Run the command DisplayToken.exe to validate that the HSM client is properly installed.

You must initialize ActivID KMS. For detailed information, refer to Installing and Using ActivID KMS .