# PKCS#11 support on mender server

**URL:** https://hub.mender.io/t/pkcs-11-support-on-mender-server/4587
**Category:** General Discussions
**Created:** [February 9, 2022, 9:56am UTC](https://hub.mender.io/t/pkcs-11-support-on-mender-server/4587 "2022-02-09T09:56:33Z")
**Posts on this page:** 3
**Page:** 1

<div class="post-metadata">

### Author: ![sandevins](https://yyz2.discourse-cdn.com/flex036/user_avatar/hub.mender.io/sandevins/32/1439_2.png) [@sandevins](https://hub.mender.io/u/sandevins)
#### Post date: [February 9, 2022, 9:56am UTC](https://hub.mender.io/t/pkcs-11-support-on-mender-server/4587/1 "2022-02-09T09:56:33Z")

</div>

Hi,

Are there any plans to add support for PKCS#11 on a deployed Mender server? There is for the clients, but the private key of the server has still to be in plain text.

Best Regards,

---

<div class="post-metadata">

### Author: ![eystein](https://avatars.discourse-cdn.com/v4/letter/e/e5b9ba/32.png) [@eystein](https://hub.mender.io/u/eystein)
#### Post date: [February 22, 2022, 10:28pm UTC](https://hub.mender.io/t/pkcs-11-support-on-mender-server/4587/2 "2022-02-22T22:28:08Z")

</div>

Hello @sandevins ,

No plans for this at the moment, as the server typically lives in a more secure / tamper proof environment than the client…

That said, we’re open to pull requests, but I am afraid this is a major change because I think it would require all crypto operations in the server be switched to using OpenSSL.

---

<div class="post-metadata">

### Author: ![sandevins](https://yyz2.discourse-cdn.com/flex036/user_avatar/hub.mender.io/sandevins/32/1439_2.png) [@sandevins](https://hub.mender.io/u/sandevins)
#### Post date: [February 25, 2022, 12:47pm UTC](https://hub.mender.io/t/pkcs-11-support-on-mender-server/4587/3 "2022-02-25T12:47:46Z")

</div>

Dear @eystein,

It’s true that it should be in a more secure environment. But the server usually is a target for attackers and by stealing the secret key that mender uses would allow to impersonate such server.

Regards,
