Setting up Configuration Files

Before integrating SKLM with the CipherTrust Manager, you need to perform the following configurations at SKLM machine:

1. Create configuration file CipherTrustManager.Config, with the following attributes. However, you can name it as per your requirement.

   name = TKLM
   library=C:\Program Files\Ingrian\PKCS11\ingPKCS11.dll 
   description=CipherTrust Manager config
   slotListIndex =  1
   attributes (*, CKO_PRIVATE_KEY, *) = {
   CKA_SENSITIVE = true
   CKA_SIGN=true
   CKA_DECRYPT=true
   }
   attributes (*, CKO_PUBLIC_KEY, *) = {
   CKA_VERIFY=true
   CKA_ENCRYPT=true
   }
   attributes (*, CKO_SECRET_KEY, *) = {
   CKA_SENSITIVE = true
   CKA_ENCRYPT=true
   CKA_DECRYPT=true
   CKA_TOKEN=true 
   }
   

2. Add the following parameters in SKLMConfig.properties file for the CipherTrust Manager. SKLMConfig.properties file is located at: <Path where SKLM is installed>\config\SKLMConfig.properties.

   pkcs11.pin=username:password // This username and password is the one which we used on the CipherTrust Manager
   pkcs11.config=<Path where CipherTrustManager.Config is placed>
   

3. Update IngrianNAE.properties file present at the following location with the CipherTrust Manager IP address, SSL port, and SSL certs.

   C:\Program Files\Ingrian\PKCS11\IngrianNAE.properties

4. Restart the IBM Websphere Application Server (IBMWAS90Service) service under Task Manager > Service Manager > Services.