Downloading the IBM Hyper Protect Container Runtime fix pack

Before you begin

Ensure that you have a system that meets the requirements as detailed in System requirements.

Procedure

Complete the following steps.

1. Go to the IBM Fix Central website.

2. Locate IBM Hyper Protect Virtual Servers fix packs either by entering IBM Hyper Protect Virtual Servers on the Find product panel, or select IBM Hyper Protect Virtual Servers under the z Systems product group on the Select product panel.

3. Select the version and platform, and then click Continue.

4. Select the fix pack from the list on the Select fixes page, and then click Continue.

5. Log in to the IBM Fix Central site with your IBM ID and password as prompted, and then download the selected fix pack installation image.

6. Create a directory to store the IBM Hyper Protect Virtual Servers fix pack installation image. Change to the directory, and extract the compressed file by using the following commands.

   mkdir /opt/<installation_directory>
   cd /opt/<installation_directory>
   gunzip IBM_HPVS_2.1.4.1.tar.gz
   tar -xvf IBM_HPVS_2.1.4.1.tar
   

   You will get the following files in the current directory:

   • IBM_HPVS_2.1.4.1.tar.gz, the offering image tar file.
   • IBM_HPVS_2.1.4.1.sig, the signature file for the offering image.

   Note: You can download the public key issued by IBM for the offering image:

   • For version 2.1.4.1

7. To verify the integrity of IBM Hyper Protect Virtual Servers image tar file, run the following example command by using the signature file with the .sig suffix, and the public key that you downloaded with the suffix .pem, along with the fix pack image tar file.

   openssl dgst -sha256 -verify publickey.pem -signature IBM_HPVS_2.1.4.1.sig IBM_HPVS_2.1.4.1.tar.gz
   

8. Extract the compressed tar file by using the following commands.

   cd /opt/<installation_directory>
   tar -xvzf IBM_HPVS_2.1.4.1.tar.gz
   

   Note: Some of the extracted files are in *.gz format, and they should be used as is and should not be extracted once again.

Result

The following directories and files are available after you extract the file:

• readme.txt, which is the general README file for IBM Hyper Protect Virtual Servers.
• License, a directory that contains the license files of IBM Hyper Protect Virtual Servers.
• version, which has the version information of IBM Hyper Protect Virtual Servers.
• images, a directory that contains the IBM Hyper Protect Container Runtime qcow2 image, which is used to bring up a IBM Hyper Protect Virtual Servers instance in KVM environment.
• config/certs, a directory that contains all the certificates that are used to encrypt the contract, attestation, and signatures.
• swidtag, a directory that contains the IBM License Metric Tool (ILMT) configuration file.

You can see files and directories similar to the following example under the <installation_directory> directory.

# tree
.
├── License
│   ├── LA_cs
│   ├── LA_de
│   ├── LA_el
│   ├── LA_en
│   ├── LA_es
│   ├── LA_fr
│   ├── LA_in
│   ├── LA_it
│   ├── LA_ja
│   ├── LA_ko
│   ├── LA_lt
│   ├── LA_pl
│   ├── LA_pt
│   ├── LA_ru
│   ├── LA_sl
│   ├── LA_tr
│   ├── LA_zh
│   ├── LA_zh_TW
│   ├── LI_cs
│   ├── LI_de
│   ├── LI_el
│   ├── LI_en
│   ├── LI_es
│   ├── LI_fr
│   ├── LI_in
│   ├── LI_it
│   ├── LI_ja
│   ├── LI_ko
│   ├── LI_lt
│   ├── LI_pl
│   ├── LI_pt
│   ├── LI_ru
│   ├── LI_sl
│   ├── LI_tr
│   ├── LI_zh
│   ├── LI_zh_TW
│   ├── non_ibm_license
│   └── notices
├── config
│   └── certs
│       ├── ibm-hyper-protect-container-runtime-23.4.0-attestation.crt
│       ├── ibm-hyper-protect-container-runtime-23.4.0-encrypt.crt
│       └── ibm-hyper-protect-container-runtime-23.4.0-intermediate.crt
├── images
│   └── ibm-hyper-protect-container-runtime-23.4.0.qcow2
├── readme.txt
├── swidtag
│   └── ibm.com_IBM_Hyper_Protect_Virtual_Servers-2.1.4.1.swidtag
└── version

Next

For more information about how you can create a contract, see About the contract.