AC1) self-test is passing AC2) integration tests with httpd, bind and libssh are either passing or there are bugs reported to the tested components (ie. not pkcs11-provider) AC3) pkcs11-provider is configured properly upon its installation (ie. no need to change openssl configuration unless non-default configuration is required)

.OpenSSL uses `pkcs11-provider` for hardware tokens Because OpenSSL 3.0 deprecated engines and replaced them with providers, RHEL 10 replaces the `openssl-pkcs11` engine with the `pkcs11-provider`. This allows OpenSSL to use hardware tokens in applications such as `apache` HTTPD, `libssh`, `bind`, and other applications that are linked with OpenSSL and use asymmetric private keys stored in an HSM, smartcard or other tokens with a PKCS #11 driver available.