Using Fortanix Data Security Manager With AppViewX

Introduction

The integration between AppViewX and Fortanix helps enterprises overcome the challenges brought by managing private keys in a complex infrastructure. AppViewX acts as the automation and orchestration engine for the lifecycle management of X.509 certificates, and Fortanix Data Security Manager (DSM) ensures the security of the private keys associated with those certificates in the cloud, on-premises or as a hybrid solution.

Integrating Fortanix HSM with AppViewX

Prerequisites

The following are the prerequisites to perform integration with AppViewX:

  • Fortanix must provide the following files:
    fortanix_pkcs11.so and pkcs11.conf
  • The pkcs11.conf file should have the API endpoint and the log file location configured.

Integration Procedure

The following are the steps to integrate Fortanix DSM with AppViewX:

  1. Copy the files fortanix_pkcs11.so and pkcs11.conf to the AppViewX nodes where the avx_vendors plugin is enabled.
  2. Place the fortanix_pkcs11.so file in the /opt/fortanix/pkcs11/ directory.
  3. In the AppViewX nodes where the avx_vendors plugins are enabled, navigate to the AppViewX install and properties directory. Edit the properties file and enter the value for the key FORTANIX_PKCS11_LIBRARY_PATH as follows:
    FORTANIX_PKCS11_LIBRARY_PATH = /opt/fortanix/pkcs11/fortanix_pkcs11.so
  4. Place the pkcs11.conf file in the /etc/fortanix directory.
  5. Once the above-mentioned steps are executed, restart the plugins and the gateway using the following command:
    avx --restart plugins
    avx --restart gateway
  6. Once the Components are up and running, navigate to the AppViewX GUI, login, and navigate to Inventory > Device > HSM. AppViewXGUI.png Figure 1: AppViewX GUI
  7. Select Fortanix HSM and click Configure Now or the (+) the button. Enter the Name and select the Data Center. Provide the API key and any user-defined Key Handler Name. Click Save.

    Once saved, if the integration is completed successfully, you will see a pop up in the UI with a message indicating that the HSM settings have been saved successfully.

Was this article helpful?
0 out of 0 found this helpful