HSM configuration

If you select an HSM to store your server credentials, you must load the private keys and certificates onto the HSM and create a pkcs11.cfg configuration file.

You must locate the configuration file in the LicenseServer.ConfigRoot directory.

See the Adobe Primetime DRM Server for Protected Streaming/configs directory on the Adobe Primetime DRM DVD for an example PKCS11 configuration file.

See the Sun PKCS11 provider documentation regarding the format of pkcs11.cfg file.

You can use the following command from the directory where the pkcs11.cfg file is located ( keytool is installed with the Java JRE and JDK) to verify that the HSM and Sun PKCS11 configuration file has been correctly configured:

keytool -keystore NONE -storetype PKCS11 -providerClass sun.security.pkcs11.SunPKCS11 
  -providerArg pkcs11.cfg -list

If you can view your credentials in the list, then the HSM is correctly configured and the license server can now access the credentials.

On this page

Adobe Summit Banner

A virtual event April 27-28.

Expand your skills and get inspired.

Register for free
Adobe Summit Banner

A virtual event April 27-28.

Expand your skills and get inspired.

Register for free
Adobe Maker Awards Banner

Time to shine!

Apply now for the 2021 Adobe Experience Maker Awards.

Apply now
Adobe Maker Awards Banner

Time to shine!

Apply now for the 2021 Adobe Experience Maker Awards.

Apply now