---
title: "DSM Accelerator PKCS#11 Deployment"
slug: "dsm-accelerator-pkcs11-deployment-guide"
updated: 2026-06-11T09:52:33Z
published: 2026-06-11T09:52:33Z
---

> ## Documentation Index
> Fetch the complete documentation index at: https://support.fortanix.com/llms.txt
> Use this file to discover all available pages before exploring further.

# DSM Accelerator PKCS#11 Deployment

## 1.0 Introduction

Fortanix-Data-Security-Manager (DSM), in conjunction with DSM Accelerator, provides a comprehensive application encryption and tokenization service with high throughput and low latency.

Fortanix DSM allows you to securely generate, store, and use cryptographic keys and certificates, as well as secrets, such as passwords, API keys, tokens, or any blob of data.

This article **describes the Fortanix DSM Accelerator PKCS#11 deployment steps**.

## 2.0 Supported Operating Systems

*For information on the DSM Accelerator PKCS#11 supported operating systems, refer to*[*DSM Accelerator - Compatibility Matrix*](/v1/docs/dsm-accelerator-compatibility-matrix)*.*

## 3.0 Installation

The RPM and DEB installer copies the Fortanix DSM Accelerator PKCS#11 shared object file (library) to `/opt/fortanix/pkcs11/fortanix_accelerator_pkcs11.so`.

Download the latest `.so` file and use it directly from [*here*](https://fortanix.zendesk.com/hc/en-us/sections/9696324150036-DSM-Accelerator-PKCS-11).

*For more information on installation and configuration, refer to*[*PKCS#11 Library*](/v1/docs/clients-pkcs11-library)*.*

## 4.0 Deployment Process

- The Fortanix DSM Accelerator PKCS#11 is deployed locally on the application client machine.
- The Fortanix DSM Accelerator client authenticates with Fortanix DSM using an API key.
- Applications call crypto functions such as `C_Encrypt`, `C_Decrypt`, and so on in the PKCS#11 DSM Accelerator library to perform cryptographic operations.
- When a key is used for the first time, it is fetched from Fortanix DSM and then gets cached in the DSM Accelerator cache memory.
- For subsequent calls, the cached key is used.
- The key will stay cached until the application that uses Fortanix DSM Accelerator is restarted or if the host where DSM Accelerator is running is restarted.

> [!NOTE]
> NOTE
> 
> - When you create a security object, ensure it has the “Export” permission enabled to use it with DSM Fortanix Accelerator.
> - The Fortanix DSM Accelerator client does not support SGX mode. SGX mode support might be added in the future.

## 5.0 Additional References

- *For information on Fortanix DSM Accelerator PKCS#11 configurations and supported features, refer to the*[*DSM Accelerator PKCS#11 Developer Guide*](/v1/docs/dsm-accelerator-pkcs11-developer-guide)*.*
- *For information about the Fortanix DSM Accelerator, refer to*[*DSM Accelerator-Concepts*](https://support.fortanix.com/docs/dsm-accelerator-concepts)*.*

Fortanix Data Security Manager (DSM) is the world’s first cloud service secured with Intel® SGX. With Fortanix DSM, you can securely generate, store, and use cryptographic keys and certificates, as well as other secrets such as passwords, API keys, tokens, or any blob of data. Your business-critical applications and containers can integrate with Fortanix DSM using legacy cryptographic interfaces (PKCS#11, CNG, and JCE) or using the native Fortanix DSM RESTful interface.