SoftHSM2.7.0

Create and manage software-backed cryptographic keys and tokens through the PKCS#11 interface with SoftHSM, giving compatible applications a software cryptographic store instead of a physical token. The implementation can serve programs that communicate through PKCS#11, so it provides a practical token environment for development, testing, and deployments built around that standard. It originated in the OpenDNSSEC project, where it was designed to support that system’s requirements, while remaining usable with other PKCS#11-aware software.

The snap includes the softhsm2-util, softhsm2-dump-file, and softhsm2-keyconv command-line utilities, along with the libsofthsm2 PKCS#11 module. Administrators and developers can use these components to work with SoftHSM tokens, inspect their stored data, handle key conversions, and connect applications to the module. Token files reside in the snap’s user-common directory by default, or in another location when the SOFTHSM2_CONF configuration variable points to a different configuration.

SoftHSM suits OpenDNSSEC environments, PKCS#11 integration testing, and applications that require token-style key storage without changing their PKCS#11 interface. Kayra publishes version 2.7.0 for Linux in the Security & Privacy category under an open-source license. It requires Linux with snapd and runs on x86_64 (amd64) systems.