Chapter 4: ProtectToolkit 7 Software Installation
The utility verifies the action and executes the appropriate command for your platform.
3.
On some platforms, you may be prompted for additional uninstallation options. On Linux, for example, you
can add a
-nodeps
option to suppress the checking of dependencies. These options should be selected
with appropriate care.
4.
After completing uninstallation, the utility will return
Success
or
Failure
, scan the system again, and display
the current installation status.
5.
You may now need to respond to any platform-specific messages to confirm that you wish to proceed with
the uninstallation. Press the
Enter
key to continue.
Boot Service Operation on Linux Platforms
To run the server as an
rc.d(init.d)
service, run the following script:
/opt/safenet/protecttoolkit7/netsrv/bin/etnetsrv_install_rc
Installing ProtectToolkit 7 on Linux Manually
The simplest way to complete installation or uninstallation of ProtectToolkit components, or to change the
Cryptoki provider, is to use the Linux Installation Utility (
safeNet-install.sh
). This utility ensures that the
correct commands for your platform are executed automatically. See
"Installing ProtectToolkit 7 on Linux" on
for more information.
If you wish to install ProtectToolkit components manually, use the commands described in this section after
extracting the installation files you downloaded from the Thales Support Portal:
>
"Manual Linux Installation for Network Mode" below
>
"Manual Linux Installation for PCIe Mode" on the next page
•
"Signing the ProtectServer 3 PCIe Driver for UEFI Secure Boot" on the next page
>
"Manual Linux Installation for Net Server Mode" on page 80
>
"Installing ProtectToolkit-C Manually on Linux" on page 81
•
"Changing the Cryptoki Provider manually" on page 82
>
"Installing ProtectToolkit-J Manually on Linux" on page 82
>
"Installing the ProtectToolkit FMSDK Manually on Linux" on page 83
Manual Linux Installation for Network Mode
Use the following commands to install or uninstall the Network Access Provider package. It includes the
components required to access a ProtectServer 3 HSM over the network, whether a ProtectServer 3 External,
ProtectServer 3+ External, or ProtectServer 3 PCIe configured for network access.
To install the Network Access Provider manually
Execute the following as
root
(where x.x.x-yy is the PTK version number). Specify the location you chose for
the installation files:
# cd /output-unix/Linux64/network_hsm_access_provider
rpm -i PTKnethsm-x.x.x-yy.x86_64.rpm
Thales ProtectServer 3 HSM and ProtectToolkit 7 Installation and Configuration Guide
2021-06-30 10:29:48-04:00 Copyright 2009-2021 Thales Group
77
