Downloading the IBM Hyper Protect Container Runtime image
You can get the IBM Hyper Protect Container Runtime (HPCR) image from IBM Passport Advantage.
Note: To download the fix pack of IBM Hyper Protect Virtual Servers, see Downloading the IBM Hyper Protect Container Runtime fix pack.
This procedure is intended for users with the role Private cloud operations administrator.
Before you begin
Ensure that you have a system that meets the requirements as detailed in System requirements.
Complete the following steps.
Log in to the IBM Passport Advantage website by using your IBM account ID and password. Contact your sales representative if you do not have one.
Go to My Programs, and then select the IBM Hyper Protect Virtual Servers program.
Download the image of version 2.1.7, part number
M0FY8EN; the name of the downloaded file is
Create a directory to store the IBM Hyper Protect Virtual Servers image. Change to the directory, and extract the compressed file by using the following commands.
mkdir /opt/<installation_directory> cd /opt/<installation_directory> gunzip IBM_HPVS_OnPrem_v2.1.7_EN.tar.gz tar -xvf IBM_HPVS_OnPrem_v2.1.7_EN.tar
You will get the following files in the current directory:
M0FY8EN.tar.gz, the offering image tar file.
M0FY8EN.tar.gz.sig, the signature file for the offering image.
Note: You can download the public key issued by IBM for the offering image:
To verify the integrity of IBM Hyper Protect Virtual Servers image tar file, run the following example command by using the signature file with the
.sigsuffix, and the public key that you downloaded with the suffix
.pem,along with the image tar file.
openssl dgst -sha256 -verify publickey.pem -signature M0FY8EN.tar.gz.sig M0FY8EN.tar.gz
Extract the compressed tar file by using the following commands.
cd /opt/<installation_directory> tar -xvzf M0FY8EN.tar.gz
- Some of the extracted files are in
*.gz format, and they should be used as is and should not be extracted once again.
- It is recommended that you use the latest images because they are valid for longer and have the latest security fixes. Upgrade to the latest image because the earlier images will expire soon.
- Some of the extracted files are in
The following directories and files are available after you extract the file:
readme.txt, which is the general README file for IBM Hyper Protect Virtual Servers.
License, a directory that contains the license files of IBM Hyper Protect Virtual Servers.
version, which has the version information of IBM Hyper Protect Virtual Servers.
images, a directory that contains the IBM Hyper Protect Container Runtime qcow2 image, which is used to bring up a IBM Hyper Protect Virtual Servers instance in KVM environment.
config/certs, a directory that contains all the certificates that are used to encrypt the contract, attestation, and signatures.
swidtag, a directory that contains the IBM License Metric Tool (ILMT) configuration file.
Certificate expiry dates
Table 2. Attestation certificate expiry dates.
|2.1.7||02 November 2024|
|2.1.6||28 August 2024|
|2.1.5||05 June 2024|
Table 3. Encryption certificate expiry dates.
|2.1.7||05 October 2024|
|2.1.6||08 December 2023|
|2.1.5||08 December 2023|
Table 4. Intermediate certificate expiry dates.
|2.1.7||02 October 2025|
|2.1.6||19 January 2024|
|2.1.5||19 January 2024|
You can see files and directories similar to the following example under the
# tree . ├── License │ ├── LA_cs │ ├── LA_de │ ├── LA_el │ ├── LA_en │ ├── LA_es │ ├── LA_fr │ ├── LA_in │ ├── LA_it │ ├── LA_ja │ ├── LA_ko │ ├── LA_lt │ ├── LA_pl │ ├── LA_pt │ ├── LA_ru │ ├── LA_sl │ ├── LA_tr │ ├── LA_zh │ ├── LA_zh_TW │ ├── LI_cs │ ├── LI_de │ ├── LI_el │ ├── LI_en │ ├── LI_es │ ├── LI_fr │ ├── LI_in │ ├── LI_it │ ├── LI_ja │ ├── LI_ko │ ├── LI_lt │ ├── LI_pl │ ├── LI_pt │ ├── LI_ru │ ├── LI_sl │ ├── LI_tr │ ├── LI_zh │ ├── LI_zh_TW │ ├── non_ibm_license │ └── notices ├── config │ └── certs │ ├── ibm-hyper-protect-container-runtime-23.11.0-attestation.crt │ ├── ibm-hyper-protect-container-runtime-23.11.0-encrypt.crt │ └── ibm-hyper-protect-container-runtime-23.11.0-intermediate.crt ├── images │ └── ibm-hyper-protect-container-runtime-23.11.0.qcow2 ├── readme.txt ├── swidtag │ └── ibm.com_IBM_Hyper_Protect_Virtual_Servers-2.1.7.swidtag └── version
For more information about how you can create a contract, see About the contract.