To enable the PKCS #11 functionality in the Builder Vault, the configuration of each MPC node must contain a section like the following.

```toml
[PKCS11.Features]
    ImportKey = true
    AESKeyGen = true
    AESGCMEncrypt = true
    AESGCMDecrypt = true
    AESCBCEncrypt = true
    AESCBCDecrypt = true
    AESGCMUnwrap = true
    AESCBCUnwrap = true
    RSAImportKey = true
    RSADecrypt = true
    ObjectDelete = true
    ObjectFind = true
    ObjectInsert = true  // Required for RSA Public Keys
```

Import functionality is used to support `C_CreateObject`.

Updated 25 days ago

### What’s Next

- [PKCS #11 Configuration](https://builder-vault-tsm.docs.blockdaemon.com/docs/pkcs11-configuration-file)