Using Fortanix Data Security Manager With AppViewX On-Premises

  • Updated on Mar 12, 2025
  • Published on Jun 26, 2024
  • 1 minute(s) read

1.0 Introduction

The integration between AppViewX and Fortanix-Data-Security-Manager (DSM) helps enterprises overcome the challenges brought by managing private keys in a complex infrastructure. AppViewX acts as the automation and orchestration engine for the lifecycle management of X.509 certificates, and Fortanix DSM ensures the security of the private keys associated with those certificates in the cloud, on-premises or as a hybrid solution.

2.0 Prerequisites

The following are the prerequisites to perform integration with AppViewX on-premises:

  • Fortanix must provide the following files:
    fortanix_pkcs11.so and pkcs11.conf

  • The pkcs11.conf file should have the API endpoint and the log file location configured.

3.0 Integrating Fortanix HSM with AppViewX On-Premises

The following are the steps to integrate Fortanix DSM with AppViewX on-premises:

  1. Copy the files fortanix_pkcs11.so and pkcs11.conf to the AppViewX nodes where the avx_vendors plugin is enabled.

  2. Place the fortanix_pkcs11.so file in the /opt/fortanix/pkcs11/ directory.

  3. In the AppViewX nodes where the avx_vendors plugins are enabled, navigate to the AppViewX install and properties directory. Edit the properties file and enter the value for the key FORTANIX_PKCS11_LIBRARY_PATH as follows:

    FORTANIX_PKCS11_LIBRARY_PATH = /opt/fortanix/pkcs11/fortanix_pkcs11.so

  4. Place the pkcs11.conf file in the /etc/fortanix directory.

  5. Once the above-mentioned steps are executed, restart the plugins and the gateway using the following command:

    avx --restart plugins
avx --restart gateway

  6. Once the Components are up and running, navigate to the AppViewX GUI, login, and navigate to Inventory → Device → HSM.  

    AppViewXGUI.png

    Figure 1: AppViewX GUI

  7. Select Fortanix HSM and click Configure Now or the (+) the button, do the following:

    1. Enter the Name and select the Data center.

    2. Provide the API Key and any user-defined Key handler name.

    3. Click Save.

      Once saved, if the integration is completed successfully, you will see a pop up in the UI with a message indicating that the HSM settings have been saved successfully.

Related articles