...

...

...

...

...

Keys and certificates for the sign and encrypt engine can be stored in a Hardware Security Model (HSM) for several use cases. This is a more secure solution for signing and encryption than PKCS#12 files, which are files in the file system, only protected by a PIN code.

...

For more information, see Configure Tomcat below.

Prerequisites

• Installed IDM 5.0.0 or later

• Installed and running HSM with PKCS#11 library available on the Identity Manager server

...

For more information, see Sign and encrypt engine in Identity Manager for further use cases that can be configured.

...

• bcmail-*.jar

• bcpgp-*.jar

• bcpkix-*.jar

• bcprov-*.jar (including bcprov-ext-*.jar)

Additional information